./Ultimate.py --spec ../sv-benchmarks/c/properties/valid-memsafety.prp --file ../sv-benchmarks/c/ntdrivers-simplified/floppy_simpl3.cil-2.c --full-output -ea --architecture 32bit -------------------------------------------------------------------------------- Checking for memory safety (deref-memtrack) Using default analysis Version 03d7b7b3 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -ea -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerMemDerefMemtrack.xml -i ../sv-benchmarks/c/ntdrivers-simplified/floppy_simpl3.cil-2.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 1fa38cbba4031a56736a5ec3c724b1da0a42c893b0e9010b5807defb3e1b19fa --- Real Ultimate output --- This is Ultimate 0.2.2-dev-03d7b7b [2022-02-21 00:01:29,565 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-02-21 00:01:29,567 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-02-21 00:01:29,591 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-02-21 00:01:29,591 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-02-21 00:01:29,593 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-02-21 00:01:29,594 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-02-21 00:01:29,598 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-02-21 00:01:29,600 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-02-21 00:01:29,600 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-02-21 00:01:29,601 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-02-21 00:01:29,602 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-02-21 00:01:29,603 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-02-21 00:01:29,604 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-02-21 00:01:29,605 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-02-21 00:01:29,605 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-02-21 00:01:29,606 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-02-21 00:01:29,607 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-02-21 00:01:29,608 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-02-21 00:01:29,610 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-02-21 00:01:29,611 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-02-21 00:01:29,613 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-02-21 00:01:29,614 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-02-21 00:01:29,615 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-02-21 00:01:29,618 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-02-21 00:01:29,624 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-02-21 00:01:29,625 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-02-21 00:01:29,625 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-02-21 00:01:29,627 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-02-21 00:01:29,628 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-02-21 00:01:29,628 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-02-21 00:01:29,629 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-02-21 00:01:29,630 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-02-21 00:01:29,631 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-02-21 00:01:29,632 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-02-21 00:01:29,632 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-02-21 00:01:29,633 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-02-21 00:01:29,634 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-02-21 00:01:29,634 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-02-21 00:01:29,635 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-02-21 00:01:29,636 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-02-21 00:01:29,636 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-DerefFreeMemtrack-32bit-Automizer_Default.epf [2022-02-21 00:01:29,666 INFO L113 SettingsManager]: Loading preferences was successful [2022-02-21 00:01:29,669 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-02-21 00:01:29,670 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-02-21 00:01:29,670 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-02-21 00:01:29,671 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-02-21 00:01:29,671 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-02-21 00:01:29,671 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-02-21 00:01:29,672 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-02-21 00:01:29,672 INFO L138 SettingsManager]: * Use SBE=true [2022-02-21 00:01:29,672 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-02-21 00:01:29,673 INFO L138 SettingsManager]: * sizeof long=4 [2022-02-21 00:01:29,673 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-02-21 00:01:29,673 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-02-21 00:01:29,673 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-02-21 00:01:29,674 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-02-21 00:01:29,674 INFO L138 SettingsManager]: * Check for the main procedure if all allocated memory was freed=true [2022-02-21 00:01:29,674 INFO L138 SettingsManager]: * Bitprecise bitfields=true [2022-02-21 00:01:29,674 INFO L138 SettingsManager]: * SV-COMP memtrack compatibility mode=true [2022-02-21 00:01:29,674 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-02-21 00:01:29,675 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-02-21 00:01:29,675 INFO L138 SettingsManager]: * sizeof long double=12 [2022-02-21 00:01:29,675 INFO L138 SettingsManager]: * Use constant arrays=true [2022-02-21 00:01:29,675 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-02-21 00:01:29,675 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-02-21 00:01:29,676 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-02-21 00:01:29,676 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-21 00:01:29,676 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-02-21 00:01:29,677 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-02-21 00:01:29,677 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-02-21 00:01:29,677 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-02-21 00:01:29,678 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G valid-free) ) CHECK( init(main()), LTL(G valid-deref) ) CHECK( init(main()), LTL(G valid-memtrack) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1fa38cbba4031a56736a5ec3c724b1da0a42c893b0e9010b5807defb3e1b19fa [2022-02-21 00:01:29,907 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-02-21 00:01:29,926 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-02-21 00:01:29,928 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-02-21 00:01:29,929 INFO L271 PluginConnector]: Initializing CDTParser... [2022-02-21 00:01:29,930 INFO L275 PluginConnector]: CDTParser initialized [2022-02-21 00:01:29,931 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ntdrivers-simplified/floppy_simpl3.cil-2.c [2022-02-21 00:01:29,981 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ab7d9f293/d29805832ad247d087a89486ed8cb3cf/FLAG82a382657 [2022-02-21 00:01:30,379 INFO L306 CDTParser]: Found 1 translation units. [2022-02-21 00:01:30,380 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ntdrivers-simplified/floppy_simpl3.cil-2.c [2022-02-21 00:01:30,405 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ab7d9f293/d29805832ad247d087a89486ed8cb3cf/FLAG82a382657 [2022-02-21 00:01:30,745 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ab7d9f293/d29805832ad247d087a89486ed8cb3cf [2022-02-21 00:01:30,747 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-02-21 00:01:30,748 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-02-21 00:01:30,750 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-02-21 00:01:30,750 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-02-21 00:01:30,754 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-02-21 00:01:30,755 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.02 12:01:30" (1/1) ... [2022-02-21 00:01:30,756 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7e9da095 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:30, skipping insertion in model container [2022-02-21 00:01:30,757 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.02 12:01:30" (1/1) ... [2022-02-21 00:01:30,762 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-02-21 00:01:30,805 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-02-21 00:01:30,976 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ntdrivers-simplified/floppy_simpl3.cil-2.c[2713,2726] [2022-02-21 00:01:31,120 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-21 00:01:31,128 INFO L203 MainTranslator]: Completed pre-run [2022-02-21 00:01:31,152 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ntdrivers-simplified/floppy_simpl3.cil-2.c[2713,2726] [2022-02-21 00:01:31,227 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-02-21 00:01:31,240 INFO L208 MainTranslator]: Completed translation [2022-02-21 00:01:31,241 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31 WrapperNode [2022-02-21 00:01:31,241 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-02-21 00:01:31,242 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-02-21 00:01:31,242 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-02-21 00:01:31,242 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-02-21 00:01:31,248 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,261 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,330 INFO L137 Inliner]: procedures = 38, calls = 62, calls flagged for inlining = 19, calls inlined = 19, statements flattened = 916 [2022-02-21 00:01:31,331 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-02-21 00:01:31,331 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-02-21 00:01:31,331 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-02-21 00:01:31,332 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-02-21 00:01:31,339 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,343 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,347 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,353 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,365 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,385 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,400 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,405 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-02-21 00:01:31,412 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-02-21 00:01:31,412 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-02-21 00:01:31,413 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-02-21 00:01:31,414 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (1/1) ... [2022-02-21 00:01:31,420 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-02-21 00:01:31,430 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-02-21 00:01:31,440 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-02-21 00:01:31,441 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-02-21 00:01:31,467 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-02-21 00:01:31,467 INFO L130 BoogieDeclarations]: Found specification of procedure IoSetDeviceInterfaceState [2022-02-21 00:01:31,467 INFO L138 BoogieDeclarations]: Found implementation of procedure IoSetDeviceInterfaceState [2022-02-21 00:01:31,467 INFO L130 BoogieDeclarations]: Found specification of procedure KeWaitForSingleObject [2022-02-21 00:01:31,468 INFO L138 BoogieDeclarations]: Found implementation of procedure KeWaitForSingleObject [2022-02-21 00:01:31,468 INFO L130 BoogieDeclarations]: Found specification of procedure IofCompleteRequest [2022-02-21 00:01:31,469 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCompleteRequest [2022-02-21 00:01:31,469 INFO L130 BoogieDeclarations]: Found specification of procedure errorFn [2022-02-21 00:01:31,469 INFO L138 BoogieDeclarations]: Found implementation of procedure errorFn [2022-02-21 00:01:31,469 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-02-21 00:01:31,469 INFO L130 BoogieDeclarations]: Found specification of procedure IofCallDriver [2022-02-21 00:01:31,469 INFO L138 BoogieDeclarations]: Found implementation of procedure IofCallDriver [2022-02-21 00:01:31,470 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-02-21 00:01:31,470 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-02-21 00:01:31,605 INFO L234 CfgBuilder]: Building ICFG [2022-02-21 00:01:31,608 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-02-21 00:01:31,617 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,719 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##16: assume !false; [2022-02-21 00:01:31,719 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume false; [2022-02-21 00:01:31,720 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,731 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##4: assume !false; [2022-02-21 00:01:31,731 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##3: assume false; [2022-02-21 00:01:31,749 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,753 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,756 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,759 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,760 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,763 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,764 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,765 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:31,770 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:32,583 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##86: assume !false; [2022-02-21 00:01:32,584 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##85: assume false; [2022-02-21 00:01:32,584 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##171: assume !false; [2022-02-21 00:01:32,584 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##170: assume false; [2022-02-21 00:01:32,584 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##75: assume !false; [2022-02-21 00:01:32,585 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##74: assume false; [2022-02-21 00:01:32,585 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##45: assume !false; [2022-02-21 00:01:32,585 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##44: assume false; [2022-02-21 00:01:32,585 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##32: assume !false; [2022-02-21 00:01:32,585 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##31: assume false; [2022-02-21 00:01:32,585 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##10: assume false; [2022-02-21 00:01:32,585 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##11: assume !false; [2022-02-21 00:01:32,586 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##109: assume false; [2022-02-21 00:01:32,587 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##110: assume !false; [2022-02-21 00:01:32,587 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##119: assume !false; [2022-02-21 00:01:32,588 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##118: assume false; [2022-02-21 00:01:32,588 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##122: assume false; [2022-02-21 00:01:32,588 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##123: assume !false; [2022-02-21 00:01:32,590 WARN L813 $ProcedureCfgBuilder]: Label in the middle of a codeblock. [2022-02-21 00:01:32,639 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##15: assume !false; [2022-02-21 00:01:32,639 INFO L766 $ProcedureCfgBuilder]: dead code at ProgramPoint $Ultimate##14: assume false; [2022-02-21 00:01:32,644 INFO L275 CfgBuilder]: Performing block encoding [2022-02-21 00:01:32,653 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-02-21 00:01:32,654 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-02-21 00:01:32,655 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.02 12:01:32 BoogieIcfgContainer [2022-02-21 00:01:32,655 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-02-21 00:01:32,657 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-02-21 00:01:32,657 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-02-21 00:01:32,660 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-02-21 00:01:32,660 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.02 12:01:30" (1/3) ... [2022-02-21 00:01:32,661 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@518d6b20 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.02 12:01:32, skipping insertion in model container [2022-02-21 00:01:32,661 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.02 12:01:31" (2/3) ... [2022-02-21 00:01:32,661 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@518d6b20 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.02 12:01:32, skipping insertion in model container [2022-02-21 00:01:32,661 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.02 12:01:32" (3/3) ... [2022-02-21 00:01:32,662 INFO L111 eAbstractionObserver]: Analyzing ICFG floppy_simpl3.cil-2.c [2022-02-21 00:01:32,666 INFO L205 ceAbstractionStarter]: Automizer settings: Hoare:false NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-02-21 00:01:32,667 INFO L164 ceAbstractionStarter]: Applying trace abstraction to program that has 2 error locations. [2022-02-21 00:01:32,701 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-02-21 00:01:32,706 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=false, mAutomataTypeConcurrency=FINITE_AUTOMATA, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=All, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2022-02-21 00:01:32,707 INFO L340 AbstractCegarLoop]: Starting to check reachability of 2 error locations. [2022-02-21 00:01:32,741 INFO L276 IsEmpty]: Start isEmpty. Operand has 238 states, 193 states have (on average 1.4870466321243523) internal successors, (287), 215 states have internal predecessors, (287), 37 states have call successors, (37), 5 states have call predecessors, (37), 5 states have return successors, (37), 32 states have call predecessors, (37), 37 states have call successors, (37) [2022-02-21 00:01:32,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 9 [2022-02-21 00:01:32,749 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:32,750 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:32,751 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:32,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:32,759 INFO L85 PathProgramCache]: Analyzing trace with hash -379437591, now seen corresponding path program 1 times [2022-02-21 00:01:32,767 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:32,767 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [629959299] [2022-02-21 00:01:32,768 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:32,768 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:32,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:32,930 INFO L290 TraceCheckUtils]: 0: Hoare triple {241#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {241#true} is VALID [2022-02-21 00:01:32,932 INFO L290 TraceCheckUtils]: 1: Hoare triple {241#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {243#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:32,932 INFO L290 TraceCheckUtils]: 2: Hoare triple {243#(= |ULTIMATE.start_main_~status~1#1| 0)} assume { :end_inline__BLAST_init } true; {243#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:32,933 INFO L290 TraceCheckUtils]: 3: Hoare triple {243#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(main_~status~1#1 >= 0); {242#false} is VALID [2022-02-21 00:01:32,933 INFO L290 TraceCheckUtils]: 4: Hoare triple {242#false} assume 1 == ~pended~0; {242#false} is VALID [2022-02-21 00:01:32,933 INFO L290 TraceCheckUtils]: 5: Hoare triple {242#false} assume ~s~0 == ~NP~0;~s~0 := ~NP~0; {242#false} is VALID [2022-02-21 00:01:32,934 INFO L290 TraceCheckUtils]: 6: Hoare triple {242#false} main_~status~1#1 := 0;main_#res#1 := main_~status~1#1; {242#false} is VALID [2022-02-21 00:01:32,934 INFO L290 TraceCheckUtils]: 7: Hoare triple {242#false} assume !(#valid == main_old_#valid#1); {242#false} is VALID [2022-02-21 00:01:32,935 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:32,935 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:32,936 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [629959299] [2022-02-21 00:01:32,936 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [629959299] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:32,937 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:32,937 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-21 00:01:32,939 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2056690951] [2022-02-21 00:01:32,939 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:32,944 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-02-21 00:01:32,944 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:32,947 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:32,959 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 8 edges. 8 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:32,960 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:32,960 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:32,983 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:32,984 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:32,992 INFO L87 Difference]: Start difference. First operand has 238 states, 193 states have (on average 1.4870466321243523) internal successors, (287), 215 states have internal predecessors, (287), 37 states have call successors, (37), 5 states have call predecessors, (37), 5 states have return successors, (37), 32 states have call predecessors, (37), 37 states have call successors, (37) Second operand has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:33,403 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:33,403 INFO L93 Difference]: Finished difference Result 237 states and 338 transitions. [2022-02-21 00:01:33,404 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:33,404 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 8 [2022-02-21 00:01:33,404 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:33,405 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:33,422 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 343 transitions. [2022-02-21 00:01:33,422 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:33,432 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 343 transitions. [2022-02-21 00:01:33,433 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 343 transitions. [2022-02-21 00:01:33,732 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 343 edges. 343 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:33,750 INFO L225 Difference]: With dead ends: 237 [2022-02-21 00:01:33,751 INFO L226 Difference]: Without dead ends: 235 [2022-02-21 00:01:33,753 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:33,756 INFO L933 BasicCegarLoop]: 336 mSDtfsCounter, 194 mSDsluCounter, 112 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 213 SdHoareTripleChecker+Valid, 448 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:33,756 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [213 Valid, 448 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-21 00:01:33,771 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 235 states. [2022-02-21 00:01:33,793 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 235 to 234. [2022-02-21 00:01:33,794 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:33,796 INFO L82 GeneralOperation]: Start isEquivalent. First operand 235 states. Second operand has 234 states, 191 states have (on average 1.4607329842931938) internal successors, (279), 211 states have internal predecessors, (279), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:33,797 INFO L74 IsIncluded]: Start isIncluded. First operand 235 states. Second operand has 234 states, 191 states have (on average 1.4607329842931938) internal successors, (279), 211 states have internal predecessors, (279), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:33,798 INFO L87 Difference]: Start difference. First operand 235 states. Second operand has 234 states, 191 states have (on average 1.4607329842931938) internal successors, (279), 211 states have internal predecessors, (279), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:33,816 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:33,817 INFO L93 Difference]: Finished difference Result 235 states and 336 transitions. [2022-02-21 00:01:33,817 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 336 transitions. [2022-02-21 00:01:33,821 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:33,821 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:33,822 INFO L74 IsIncluded]: Start isIncluded. First operand has 234 states, 191 states have (on average 1.4607329842931938) internal successors, (279), 211 states have internal predecessors, (279), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) Second operand 235 states. [2022-02-21 00:01:33,823 INFO L87 Difference]: Start difference. First operand has 234 states, 191 states have (on average 1.4607329842931938) internal successors, (279), 211 states have internal predecessors, (279), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) Second operand 235 states. [2022-02-21 00:01:33,838 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:33,838 INFO L93 Difference]: Finished difference Result 235 states and 336 transitions. [2022-02-21 00:01:33,839 INFO L276 IsEmpty]: Start isEmpty. Operand 235 states and 336 transitions. [2022-02-21 00:01:33,842 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:33,842 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:33,842 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:33,842 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:33,844 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 234 states, 191 states have (on average 1.4607329842931938) internal successors, (279), 211 states have internal predecessors, (279), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:33,856 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 234 states to 234 states and 335 transitions. [2022-02-21 00:01:33,858 INFO L78 Accepts]: Start accepts. Automaton has 234 states and 335 transitions. Word has length 8 [2022-02-21 00:01:33,858 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:33,858 INFO L470 AbstractCegarLoop]: Abstraction has 234 states and 335 transitions. [2022-02-21 00:01:33,859 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 2.6666666666666665) internal successors, (8), 3 states have internal predecessors, (8), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:33,859 INFO L276 IsEmpty]: Start isEmpty. Operand 234 states and 335 transitions. [2022-02-21 00:01:33,860 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 12 [2022-02-21 00:01:33,861 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:33,861 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:33,861 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-02-21 00:01:33,862 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:33,863 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:33,864 INFO L85 PathProgramCache]: Analyzing trace with hash 229440230, now seen corresponding path program 1 times [2022-02-21 00:01:33,865 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:33,865 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1156697675] [2022-02-21 00:01:33,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:33,865 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:33,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:33,929 INFO L290 TraceCheckUtils]: 0: Hoare triple {1187#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {1187#true} is VALID [2022-02-21 00:01:33,930 INFO L290 TraceCheckUtils]: 1: Hoare triple {1187#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,930 INFO L290 TraceCheckUtils]: 2: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume { :end_inline__BLAST_init } true; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,931 INFO L290 TraceCheckUtils]: 3: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,932 INFO L290 TraceCheckUtils]: 4: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,932 INFO L290 TraceCheckUtils]: 5: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,933 INFO L290 TraceCheckUtils]: 6: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume { :end_inline_stub_driver_init } true; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,933 INFO L290 TraceCheckUtils]: 7: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,934 INFO L290 TraceCheckUtils]: 8: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume !(3 == main_~tmp_ndt_1~0#1); {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,935 INFO L290 TraceCheckUtils]: 9: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} main_#res#1 := -1; {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} is VALID [2022-02-21 00:01:33,935 INFO L290 TraceCheckUtils]: 10: Hoare triple {1189#(= |ULTIMATE.start_main_old_#valid#1| |#valid|)} assume !(#valid == main_old_#valid#1); {1188#false} is VALID [2022-02-21 00:01:33,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:33,936 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:33,937 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1156697675] [2022-02-21 00:01:33,937 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1156697675] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:33,937 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:33,937 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-02-21 00:01:33,938 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [866158369] [2022-02-21 00:01:33,938 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:33,939 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-02-21 00:01:33,939 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:33,939 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:33,948 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 11 edges. 11 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:33,949 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:33,949 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:33,950 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:33,950 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:33,950 INFO L87 Difference]: Start difference. First operand 234 states and 335 transitions. Second operand has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:34,294 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:34,294 INFO L93 Difference]: Finished difference Result 233 states and 334 transitions. [2022-02-21 00:01:34,295 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:34,296 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 11 [2022-02-21 00:01:34,296 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:34,296 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:34,302 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 335 transitions. [2022-02-21 00:01:34,302 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:34,308 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 335 transitions. [2022-02-21 00:01:34,308 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 335 transitions. [2022-02-21 00:01:34,573 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 335 edges. 335 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:34,584 INFO L225 Difference]: With dead ends: 233 [2022-02-21 00:01:34,584 INFO L226 Difference]: Without dead ends: 229 [2022-02-21 00:01:34,589 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 2 GetRequests, 1 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:34,591 INFO L933 BasicCegarLoop]: 334 mSDtfsCounter, 214 mSDsluCounter, 58 mSDsCounter, 0 mSdLazyCounter, 34 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 233 SdHoareTripleChecker+Valid, 392 SdHoareTripleChecker+Invalid, 34 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 34 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:34,591 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [233 Valid, 392 Invalid, 34 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 34 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-21 00:01:34,594 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 229 states. [2022-02-21 00:01:34,610 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 229 to 229. [2022-02-21 00:01:34,611 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:34,612 INFO L82 GeneralOperation]: Start isEquivalent. First operand 229 states. Second operand has 229 states, 187 states have (on average 1.4224598930481283) internal successors, (266), 206 states have internal predecessors, (266), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:34,613 INFO L74 IsIncluded]: Start isIncluded. First operand 229 states. Second operand has 229 states, 187 states have (on average 1.4224598930481283) internal successors, (266), 206 states have internal predecessors, (266), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:34,613 INFO L87 Difference]: Start difference. First operand 229 states. Second operand has 229 states, 187 states have (on average 1.4224598930481283) internal successors, (266), 206 states have internal predecessors, (266), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:34,623 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:34,623 INFO L93 Difference]: Finished difference Result 229 states and 322 transitions. [2022-02-21 00:01:34,624 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 322 transitions. [2022-02-21 00:01:34,625 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:34,625 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:34,626 INFO L74 IsIncluded]: Start isIncluded. First operand has 229 states, 187 states have (on average 1.4224598930481283) internal successors, (266), 206 states have internal predecessors, (266), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) Second operand 229 states. [2022-02-21 00:01:34,627 INFO L87 Difference]: Start difference. First operand has 229 states, 187 states have (on average 1.4224598930481283) internal successors, (266), 206 states have internal predecessors, (266), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) Second operand 229 states. [2022-02-21 00:01:34,635 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:34,636 INFO L93 Difference]: Finished difference Result 229 states and 322 transitions. [2022-02-21 00:01:34,636 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 322 transitions. [2022-02-21 00:01:34,637 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:34,637 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:34,637 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:34,637 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:34,638 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 229 states, 187 states have (on average 1.4224598930481283) internal successors, (266), 206 states have internal predecessors, (266), 37 states have call successors, (37), 5 states have call predecessors, (37), 4 states have return successors, (19), 18 states have call predecessors, (19), 19 states have call successors, (19) [2022-02-21 00:01:34,646 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 229 states to 229 states and 322 transitions. [2022-02-21 00:01:34,646 INFO L78 Accepts]: Start accepts. Automaton has 229 states and 322 transitions. Word has length 11 [2022-02-21 00:01:34,647 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:34,647 INFO L470 AbstractCegarLoop]: Abstraction has 229 states and 322 transitions. [2022-02-21 00:01:34,647 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 2 states have (on average 5.5) internal successors, (11), 3 states have internal predecessors, (11), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:34,647 INFO L276 IsEmpty]: Start isEmpty. Operand 229 states and 322 transitions. [2022-02-21 00:01:34,648 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 19 [2022-02-21 00:01:34,648 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:34,648 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:34,648 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-02-21 00:01:34,649 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:34,649 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:34,649 INFO L85 PathProgramCache]: Analyzing trace with hash 23733269, now seen corresponding path program 1 times [2022-02-21 00:01:34,649 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:34,650 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1520157843] [2022-02-21 00:01:34,650 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:34,650 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:34,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:34,727 INFO L290 TraceCheckUtils]: 0: Hoare triple {2112#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {2112#true} is VALID [2022-02-21 00:01:34,727 INFO L290 TraceCheckUtils]: 1: Hoare triple {2112#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2112#true} is VALID [2022-02-21 00:01:34,728 INFO L290 TraceCheckUtils]: 2: Hoare triple {2112#true} assume { :end_inline__BLAST_init } true; {2112#true} is VALID [2022-02-21 00:01:34,728 INFO L290 TraceCheckUtils]: 3: Hoare triple {2112#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {2112#true} is VALID [2022-02-21 00:01:34,728 INFO L290 TraceCheckUtils]: 4: Hoare triple {2112#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {2112#true} is VALID [2022-02-21 00:01:34,729 INFO L290 TraceCheckUtils]: 5: Hoare triple {2112#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,729 INFO L290 TraceCheckUtils]: 6: Hoare triple {2114#(= ~s~0 ~NP~0)} assume { :end_inline_stub_driver_init } true; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,729 INFO L290 TraceCheckUtils]: 7: Hoare triple {2114#(= ~s~0 ~NP~0)} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,730 INFO L290 TraceCheckUtils]: 8: Hoare triple {2114#(= ~s~0 ~NP~0)} assume 3 == main_~tmp_ndt_1~0#1; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,730 INFO L290 TraceCheckUtils]: 9: Hoare triple {2114#(= ~s~0 ~NP~0)} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,731 INFO L290 TraceCheckUtils]: 10: Hoare triple {2114#(= ~s~0 ~NP~0)} assume 1 == ~PagingReferenceCount~0; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,731 INFO L290 TraceCheckUtils]: 11: Hoare triple {2114#(= ~s~0 ~NP~0)} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,732 INFO L290 TraceCheckUtils]: 12: Hoare triple {2114#(= ~s~0 ~NP~0)} assume 0 != FloppyPnp_~disketteExtension__IsRemoved~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := -1073741738;~myStatus~0 := -1073741738; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,733 INFO L272 TraceCheckUtils]: 13: Hoare triple {2114#(= ~s~0 ~NP~0)} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,733 INFO L290 TraceCheckUtils]: 14: Hoare triple {2114#(= ~s~0 ~NP~0)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {2114#(= ~s~0 ~NP~0)} is VALID [2022-02-21 00:01:34,734 INFO L290 TraceCheckUtils]: 15: Hoare triple {2114#(= ~s~0 ~NP~0)} assume !(~s~0 == ~NP~0); {2113#false} is VALID [2022-02-21 00:01:34,734 INFO L272 TraceCheckUtils]: 16: Hoare triple {2113#false} call errorFn(); {2113#false} is VALID [2022-02-21 00:01:34,734 INFO L290 TraceCheckUtils]: 17: Hoare triple {2113#false} assume !false; {2113#false} is VALID [2022-02-21 00:01:34,734 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:34,735 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:34,735 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1520157843] [2022-02-21 00:01:34,735 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1520157843] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:34,735 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:34,735 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-21 00:01:34,736 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1599711370] [2022-02-21 00:01:34,736 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:34,736 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-02-21 00:01:34,737 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:34,737 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:34,750 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 18 edges. 18 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:34,750 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:34,751 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:34,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:34,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:34,752 INFO L87 Difference]: Start difference. First operand 229 states and 322 transitions. Second operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:35,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:35,205 INFO L93 Difference]: Finished difference Result 344 states and 482 transitions. [2022-02-21 00:01:35,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:35,206 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 18 [2022-02-21 00:01:35,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:35,207 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:35,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 494 transitions. [2022-02-21 00:01:35,213 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:35,220 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 494 transitions. [2022-02-21 00:01:35,220 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 494 transitions. [2022-02-21 00:01:35,596 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 494 edges. 494 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:35,604 INFO L225 Difference]: With dead ends: 344 [2022-02-21 00:01:35,604 INFO L226 Difference]: Without dead ends: 343 [2022-02-21 00:01:35,605 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:35,606 INFO L933 BasicCegarLoop]: 412 mSDtfsCounter, 251 mSDsluCounter, 171 mSDsCounter, 0 mSdLazyCounter, 68 mSolverCounterSat, 18 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 251 SdHoareTripleChecker+Valid, 583 SdHoareTripleChecker+Invalid, 86 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 18 IncrementalHoareTripleChecker+Valid, 68 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:35,606 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [251 Valid, 583 Invalid, 86 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [18 Valid, 68 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-21 00:01:35,607 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-02-21 00:01:35,616 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 326. [2022-02-21 00:01:35,617 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:35,618 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 326 states, 281 states have (on average 1.3629893238434163) internal successors, (383), 285 states have internal predecessors, (383), 37 states have call successors, (37), 9 states have call predecessors, (37), 7 states have return successors, (40), 32 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:01:35,619 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 326 states, 281 states have (on average 1.3629893238434163) internal successors, (383), 285 states have internal predecessors, (383), 37 states have call successors, (37), 9 states have call predecessors, (37), 7 states have return successors, (40), 32 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:01:35,620 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 326 states, 281 states have (on average 1.3629893238434163) internal successors, (383), 285 states have internal predecessors, (383), 37 states have call successors, (37), 9 states have call predecessors, (37), 7 states have return successors, (40), 32 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:01:35,633 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:35,633 INFO L93 Difference]: Finished difference Result 343 states and 481 transitions. [2022-02-21 00:01:35,633 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 481 transitions. [2022-02-21 00:01:35,635 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:35,635 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:35,636 INFO L74 IsIncluded]: Start isIncluded. First operand has 326 states, 281 states have (on average 1.3629893238434163) internal successors, (383), 285 states have internal predecessors, (383), 37 states have call successors, (37), 9 states have call predecessors, (37), 7 states have return successors, (40), 32 states have call predecessors, (40), 27 states have call successors, (40) Second operand 343 states. [2022-02-21 00:01:35,637 INFO L87 Difference]: Start difference. First operand has 326 states, 281 states have (on average 1.3629893238434163) internal successors, (383), 285 states have internal predecessors, (383), 37 states have call successors, (37), 9 states have call predecessors, (37), 7 states have return successors, (40), 32 states have call predecessors, (40), 27 states have call successors, (40) Second operand 343 states. [2022-02-21 00:01:35,650 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:35,650 INFO L93 Difference]: Finished difference Result 343 states and 481 transitions. [2022-02-21 00:01:35,650 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 481 transitions. [2022-02-21 00:01:35,652 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:35,652 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:35,652 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:35,652 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:35,654 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 326 states, 281 states have (on average 1.3629893238434163) internal successors, (383), 285 states have internal predecessors, (383), 37 states have call successors, (37), 9 states have call predecessors, (37), 7 states have return successors, (40), 32 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:01:35,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 326 states to 326 states and 460 transitions. [2022-02-21 00:01:35,665 INFO L78 Accepts]: Start accepts. Automaton has 326 states and 460 transitions. Word has length 18 [2022-02-21 00:01:35,665 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:35,666 INFO L470 AbstractCegarLoop]: Abstraction has 326 states and 460 transitions. [2022-02-21 00:01:35,666 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 5.333333333333333) internal successors, (16), 3 states have internal predecessors, (16), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:35,666 INFO L276 IsEmpty]: Start isEmpty. Operand 326 states and 460 transitions. [2022-02-21 00:01:35,666 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-02-21 00:01:35,667 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:35,667 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:35,667 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-02-21 00:01:35,667 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:35,668 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:35,668 INFO L85 PathProgramCache]: Analyzing trace with hash -1035240094, now seen corresponding path program 1 times [2022-02-21 00:01:35,668 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:35,669 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [167537398] [2022-02-21 00:01:35,669 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:35,669 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:35,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:35,761 INFO L290 TraceCheckUtils]: 0: Hoare triple {3473#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {3473#true} is VALID [2022-02-21 00:01:35,761 INFO L290 TraceCheckUtils]: 1: Hoare triple {3473#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3473#true} is VALID [2022-02-21 00:01:35,762 INFO L290 TraceCheckUtils]: 2: Hoare triple {3473#true} assume { :end_inline__BLAST_init } true; {3473#true} is VALID [2022-02-21 00:01:35,762 INFO L290 TraceCheckUtils]: 3: Hoare triple {3473#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {3473#true} is VALID [2022-02-21 00:01:35,762 INFO L290 TraceCheckUtils]: 4: Hoare triple {3473#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {3473#true} is VALID [2022-02-21 00:01:35,763 INFO L290 TraceCheckUtils]: 5: Hoare triple {3473#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,763 INFO L290 TraceCheckUtils]: 6: Hoare triple {3475#(= ~compRegistered~0 0)} assume { :end_inline_stub_driver_init } true; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,763 INFO L290 TraceCheckUtils]: 7: Hoare triple {3475#(= ~compRegistered~0 0)} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,764 INFO L290 TraceCheckUtils]: 8: Hoare triple {3475#(= ~compRegistered~0 0)} assume 3 == main_~tmp_ndt_1~0#1; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,764 INFO L290 TraceCheckUtils]: 9: Hoare triple {3475#(= ~compRegistered~0 0)} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,765 INFO L290 TraceCheckUtils]: 10: Hoare triple {3475#(= ~compRegistered~0 0)} assume 1 == ~PagingReferenceCount~0; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,765 INFO L290 TraceCheckUtils]: 11: Hoare triple {3475#(= ~compRegistered~0 0)} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,766 INFO L290 TraceCheckUtils]: 12: Hoare triple {3475#(= ~compRegistered~0 0)} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,769 INFO L290 TraceCheckUtils]: 13: Hoare triple {3475#(= ~compRegistered~0 0)} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,770 INFO L290 TraceCheckUtils]: 14: Hoare triple {3475#(= ~compRegistered~0 0)} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,773 INFO L290 TraceCheckUtils]: 15: Hoare triple {3475#(= ~compRegistered~0 0)} assume !(~s~0 != ~NP~0); {3475#(= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:35,774 INFO L290 TraceCheckUtils]: 16: Hoare triple {3475#(= ~compRegistered~0 0)} assume 0 != ~compRegistered~0; {3474#false} is VALID [2022-02-21 00:01:35,774 INFO L272 TraceCheckUtils]: 17: Hoare triple {3474#false} call errorFn(); {3474#false} is VALID [2022-02-21 00:01:35,774 INFO L290 TraceCheckUtils]: 18: Hoare triple {3474#false} assume !false; {3474#false} is VALID [2022-02-21 00:01:35,775 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:35,775 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:35,775 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [167537398] [2022-02-21 00:01:35,775 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [167537398] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:35,776 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:35,776 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-21 00:01:35,776 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [533560871] [2022-02-21 00:01:35,776 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:35,777 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-21 00:01:35,777 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:35,777 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:35,792 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 19 edges. 19 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:35,793 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:35,793 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:35,793 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:35,794 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:35,794 INFO L87 Difference]: Start difference. First operand 326 states and 460 transitions. Second operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:36,145 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:36,146 INFO L93 Difference]: Finished difference Result 512 states and 717 transitions. [2022-02-21 00:01:36,146 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:36,146 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 19 [2022-02-21 00:01:36,147 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:36,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:36,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 460 transitions. [2022-02-21 00:01:36,165 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:36,171 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 460 transitions. [2022-02-21 00:01:36,173 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 460 transitions. [2022-02-21 00:01:36,532 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 460 edges. 460 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:36,546 INFO L225 Difference]: With dead ends: 512 [2022-02-21 00:01:36,546 INFO L226 Difference]: Without dead ends: 512 [2022-02-21 00:01:36,547 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:36,548 INFO L933 BasicCegarLoop]: 314 mSDtfsCounter, 273 mSDsluCounter, 165 mSDsCounter, 0 mSdLazyCounter, 6 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 273 SdHoareTripleChecker+Valid, 479 SdHoareTripleChecker+Invalid, 12 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 6 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:36,548 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [273 Valid, 479 Invalid, 12 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 6 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-21 00:01:36,549 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 512 states. [2022-02-21 00:01:36,562 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 512 to 485. [2022-02-21 00:01:36,563 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:36,564 INFO L82 GeneralOperation]: Start isEquivalent. First operand 512 states. Second operand has 485 states, 423 states have (on average 1.3617021276595744) internal successors, (576), 424 states have internal predecessors, (576), 47 states have call successors, (47), 17 states have call predecessors, (47), 14 states have return successors, (61), 44 states have call predecessors, (61), 39 states have call successors, (61) [2022-02-21 00:01:36,566 INFO L74 IsIncluded]: Start isIncluded. First operand 512 states. Second operand has 485 states, 423 states have (on average 1.3617021276595744) internal successors, (576), 424 states have internal predecessors, (576), 47 states have call successors, (47), 17 states have call predecessors, (47), 14 states have return successors, (61), 44 states have call predecessors, (61), 39 states have call successors, (61) [2022-02-21 00:01:36,567 INFO L87 Difference]: Start difference. First operand 512 states. Second operand has 485 states, 423 states have (on average 1.3617021276595744) internal successors, (576), 424 states have internal predecessors, (576), 47 states have call successors, (47), 17 states have call predecessors, (47), 14 states have return successors, (61), 44 states have call predecessors, (61), 39 states have call successors, (61) [2022-02-21 00:01:36,587 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:36,587 INFO L93 Difference]: Finished difference Result 512 states and 717 transitions. [2022-02-21 00:01:36,588 INFO L276 IsEmpty]: Start isEmpty. Operand 512 states and 717 transitions. [2022-02-21 00:01:36,589 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:36,589 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:36,591 INFO L74 IsIncluded]: Start isIncluded. First operand has 485 states, 423 states have (on average 1.3617021276595744) internal successors, (576), 424 states have internal predecessors, (576), 47 states have call successors, (47), 17 states have call predecessors, (47), 14 states have return successors, (61), 44 states have call predecessors, (61), 39 states have call successors, (61) Second operand 512 states. [2022-02-21 00:01:36,593 INFO L87 Difference]: Start difference. First operand has 485 states, 423 states have (on average 1.3617021276595744) internal successors, (576), 424 states have internal predecessors, (576), 47 states have call successors, (47), 17 states have call predecessors, (47), 14 states have return successors, (61), 44 states have call predecessors, (61), 39 states have call successors, (61) Second operand 512 states. [2022-02-21 00:01:36,613 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:36,613 INFO L93 Difference]: Finished difference Result 512 states and 717 transitions. [2022-02-21 00:01:36,614 INFO L276 IsEmpty]: Start isEmpty. Operand 512 states and 717 transitions. [2022-02-21 00:01:36,615 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:36,615 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:36,616 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:36,616 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:36,618 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 485 states, 423 states have (on average 1.3617021276595744) internal successors, (576), 424 states have internal predecessors, (576), 47 states have call successors, (47), 17 states have call predecessors, (47), 14 states have return successors, (61), 44 states have call predecessors, (61), 39 states have call successors, (61) [2022-02-21 00:01:36,634 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 485 states to 485 states and 684 transitions. [2022-02-21 00:01:36,634 INFO L78 Accepts]: Start accepts. Automaton has 485 states and 684 transitions. Word has length 19 [2022-02-21 00:01:36,635 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:36,635 INFO L470 AbstractCegarLoop]: Abstraction has 485 states and 684 transitions. [2022-02-21 00:01:36,635 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 6.0) internal successors, (18), 3 states have internal predecessors, (18), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:36,635 INFO L276 IsEmpty]: Start isEmpty. Operand 485 states and 684 transitions. [2022-02-21 00:01:36,636 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 23 [2022-02-21 00:01:36,636 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:36,636 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:36,636 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-02-21 00:01:36,637 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:36,637 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:36,637 INFO L85 PathProgramCache]: Analyzing trace with hash -1224032788, now seen corresponding path program 1 times [2022-02-21 00:01:36,638 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:36,638 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1942031181] [2022-02-21 00:01:36,638 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:36,638 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:36,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:36,689 INFO L290 TraceCheckUtils]: 0: Hoare triple {5499#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {5499#true} is VALID [2022-02-21 00:01:36,690 INFO L290 TraceCheckUtils]: 1: Hoare triple {5499#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5499#true} is VALID [2022-02-21 00:01:36,690 INFO L290 TraceCheckUtils]: 2: Hoare triple {5499#true} assume { :end_inline__BLAST_init } true; {5499#true} is VALID [2022-02-21 00:01:36,690 INFO L290 TraceCheckUtils]: 3: Hoare triple {5499#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {5499#true} is VALID [2022-02-21 00:01:36,691 INFO L290 TraceCheckUtils]: 4: Hoare triple {5499#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {5499#true} is VALID [2022-02-21 00:01:36,691 INFO L290 TraceCheckUtils]: 5: Hoare triple {5499#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,692 INFO L290 TraceCheckUtils]: 6: Hoare triple {5501#(= ~pended~0 0)} assume { :end_inline_stub_driver_init } true; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,692 INFO L290 TraceCheckUtils]: 7: Hoare triple {5501#(= ~pended~0 0)} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,692 INFO L290 TraceCheckUtils]: 8: Hoare triple {5501#(= ~pended~0 0)} assume 3 == main_~tmp_ndt_1~0#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,693 INFO L290 TraceCheckUtils]: 9: Hoare triple {5501#(= ~pended~0 0)} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,693 INFO L290 TraceCheckUtils]: 10: Hoare triple {5501#(= ~pended~0 0)} assume 1 == ~PagingReferenceCount~0; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,694 INFO L290 TraceCheckUtils]: 11: Hoare triple {5501#(= ~pended~0 0)} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,694 INFO L290 TraceCheckUtils]: 12: Hoare triple {5501#(= ~pended~0 0)} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,695 INFO L290 TraceCheckUtils]: 13: Hoare triple {5501#(= ~pended~0 0)} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,695 INFO L290 TraceCheckUtils]: 14: Hoare triple {5501#(= ~pended~0 0)} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,696 INFO L290 TraceCheckUtils]: 15: Hoare triple {5501#(= ~pended~0 0)} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,696 INFO L290 TraceCheckUtils]: 16: Hoare triple {5501#(= ~pended~0 0)} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 1;assume { :begin_inline_FlQueueIrpToThread } true;FlQueueIrpToThread_#in~Irp#1, FlQueueIrpToThread_#in~DisketteExtension#1 := FloppyPnp_~Irp#1, FloppyPnp_~disketteExtension~0#1;havoc FlQueueIrpToThread_#res#1;havoc FlQueueIrpToThread_#t~nondet4#1, FlQueueIrpToThread_#t~nondet5#1, FlQueueIrpToThread_#t~nondet6#1, FlQueueIrpToThread_#t~nondet7#1, FlQueueIrpToThread_#t~nondet8#1, FlQueueIrpToThread_#t~post9#1, FlQueueIrpToThread_#t~post10#1, FlQueueIrpToThread_#t~post11#1, FlQueueIrpToThread_#t~ret12#1, FlQueueIrpToThread_#t~post13#1, FlQueueIrpToThread_#t~ret14#1, FlQueueIrpToThread_#t~ret15#1, FlQueueIrpToThread_~Irp#1, FlQueueIrpToThread_~DisketteExtension#1, FlQueueIrpToThread_~status~0#1, FlQueueIrpToThread_~threadHandle~0#1, FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1, FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1, FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1, FlQueueIrpToThread_~Irp__IoStatus__Status~0#1, FlQueueIrpToThread_~Irp__IoStatus__Information~0#1, FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1, FlQueueIrpToThread_~ObjAttributes~0#1, FlQueueIrpToThread_~__cil_tmp12~0#1, FlQueueIrpToThread_~__cil_tmp13~0#1;FlQueueIrpToThread_~Irp#1 := FlQueueIrpToThread_#in~Irp#1;FlQueueIrpToThread_~DisketteExtension#1 := FlQueueIrpToThread_#in~DisketteExtension#1;havoc FlQueueIrpToThread_~status~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet4#1 && FlQueueIrpToThread_#t~nondet4#1 <= 2147483647;FlQueueIrpToThread_~threadHandle~0#1 := FlQueueIrpToThread_#t~nondet4#1;havoc FlQueueIrpToThread_#t~nondet4#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet5#1 && FlQueueIrpToThread_#t~nondet5#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1 := FlQueueIrpToThread_#t~nondet5#1;havoc FlQueueIrpToThread_#t~nondet5#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet6#1 && FlQueueIrpToThread_#t~nondet6#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1 := FlQueueIrpToThread_#t~nondet6#1;havoc FlQueueIrpToThread_#t~nondet6#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet7#1 && FlQueueIrpToThread_#t~nondet7#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1 := FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Status~0#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Information~0#1;havoc FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet8#1 && FlQueueIrpToThread_#t~nondet8#1 <= 2147483647;FlQueueIrpToThread_~ObjAttributes~0#1 := FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_~__cil_tmp12~0#1;havoc FlQueueIrpToThread_~__cil_tmp13~0#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,697 INFO L290 TraceCheckUtils]: 17: Hoare triple {5501#(= ~pended~0 0)} assume !(1 == FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1);FlQueueIrpToThread_#t~post9#1 := FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1;FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1 := 1 + FlQueueIrpToThread_#t~post9#1;havoc FlQueueIrpToThread_#t~post9#1; {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,697 INFO L290 TraceCheckUtils]: 18: Hoare triple {5501#(= ~pended~0 0)} assume !(0 == FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1); {5501#(= ~pended~0 0)} is VALID [2022-02-21 00:01:36,697 INFO L290 TraceCheckUtils]: 19: Hoare triple {5501#(= ~pended~0 0)} assume !(0 == ~pended~0); {5500#false} is VALID [2022-02-21 00:01:36,698 INFO L272 TraceCheckUtils]: 20: Hoare triple {5500#false} call errorFn(); {5500#false} is VALID [2022-02-21 00:01:36,698 INFO L290 TraceCheckUtils]: 21: Hoare triple {5500#false} assume !false; {5500#false} is VALID [2022-02-21 00:01:36,698 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:36,698 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:36,699 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1942031181] [2022-02-21 00:01:36,699 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1942031181] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:36,699 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:36,699 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-21 00:01:36,699 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934519308] [2022-02-21 00:01:36,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:36,700 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-02-21 00:01:36,700 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:36,700 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:36,717 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 22 edges. 22 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:36,718 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:36,718 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:36,719 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:36,719 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:36,719 INFO L87 Difference]: Start difference. First operand 485 states and 684 transitions. Second operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:37,046 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:37,047 INFO L93 Difference]: Finished difference Result 556 states and 772 transitions. [2022-02-21 00:01:37,047 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:37,048 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 22 [2022-02-21 00:01:37,048 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:37,048 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:37,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 383 transitions. [2022-02-21 00:01:37,051 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:37,054 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 383 transitions. [2022-02-21 00:01:37,054 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 383 transitions. [2022-02-21 00:01:37,330 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 383 edges. 383 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:37,347 INFO L225 Difference]: With dead ends: 556 [2022-02-21 00:01:37,347 INFO L226 Difference]: Without dead ends: 556 [2022-02-21 00:01:37,348 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:37,348 INFO L933 BasicCegarLoop]: 304 mSDtfsCounter, 277 mSDsluCounter, 80 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 277 SdHoareTripleChecker+Valid, 384 SdHoareTripleChecker+Invalid, 15 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:37,349 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [277 Valid, 384 Invalid, 15 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-21 00:01:37,350 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 556 states. [2022-02-21 00:01:37,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 556 to 523. [2022-02-21 00:01:37,361 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:37,362 INFO L82 GeneralOperation]: Start isEquivalent. First operand 556 states. Second operand has 523 states, 455 states have (on average 1.3604395604395605) internal successors, (619), 462 states have internal predecessors, (619), 49 states have call successors, (49), 20 states have call predecessors, (49), 18 states have return successors, (65), 42 states have call predecessors, (65), 42 states have call successors, (65) [2022-02-21 00:01:37,364 INFO L74 IsIncluded]: Start isIncluded. First operand 556 states. Second operand has 523 states, 455 states have (on average 1.3604395604395605) internal successors, (619), 462 states have internal predecessors, (619), 49 states have call successors, (49), 20 states have call predecessors, (49), 18 states have return successors, (65), 42 states have call predecessors, (65), 42 states have call successors, (65) [2022-02-21 00:01:37,365 INFO L87 Difference]: Start difference. First operand 556 states. Second operand has 523 states, 455 states have (on average 1.3604395604395605) internal successors, (619), 462 states have internal predecessors, (619), 49 states have call successors, (49), 20 states have call predecessors, (49), 18 states have return successors, (65), 42 states have call predecessors, (65), 42 states have call successors, (65) [2022-02-21 00:01:37,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:37,384 INFO L93 Difference]: Finished difference Result 556 states and 772 transitions. [2022-02-21 00:01:37,384 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 772 transitions. [2022-02-21 00:01:37,386 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:37,386 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:37,388 INFO L74 IsIncluded]: Start isIncluded. First operand has 523 states, 455 states have (on average 1.3604395604395605) internal successors, (619), 462 states have internal predecessors, (619), 49 states have call successors, (49), 20 states have call predecessors, (49), 18 states have return successors, (65), 42 states have call predecessors, (65), 42 states have call successors, (65) Second operand 556 states. [2022-02-21 00:01:37,389 INFO L87 Difference]: Start difference. First operand has 523 states, 455 states have (on average 1.3604395604395605) internal successors, (619), 462 states have internal predecessors, (619), 49 states have call successors, (49), 20 states have call predecessors, (49), 18 states have return successors, (65), 42 states have call predecessors, (65), 42 states have call successors, (65) Second operand 556 states. [2022-02-21 00:01:37,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:37,408 INFO L93 Difference]: Finished difference Result 556 states and 772 transitions. [2022-02-21 00:01:37,408 INFO L276 IsEmpty]: Start isEmpty. Operand 556 states and 772 transitions. [2022-02-21 00:01:37,410 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:37,410 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:37,410 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:37,411 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:37,412 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 523 states, 455 states have (on average 1.3604395604395605) internal successors, (619), 462 states have internal predecessors, (619), 49 states have call successors, (49), 20 states have call predecessors, (49), 18 states have return successors, (65), 42 states have call predecessors, (65), 42 states have call successors, (65) [2022-02-21 00:01:37,428 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 523 states to 523 states and 733 transitions. [2022-02-21 00:01:37,429 INFO L78 Accepts]: Start accepts. Automaton has 523 states and 733 transitions. Word has length 22 [2022-02-21 00:01:37,429 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:37,429 INFO L470 AbstractCegarLoop]: Abstraction has 523 states and 733 transitions. [2022-02-21 00:01:37,429 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 7.0) internal successors, (21), 3 states have internal predecessors, (21), 1 states have call successors, (1), 1 states have call predecessors, (1), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:37,430 INFO L276 IsEmpty]: Start isEmpty. Operand 523 states and 733 transitions. [2022-02-21 00:01:37,430 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 28 [2022-02-21 00:01:37,430 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:37,431 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:37,431 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2022-02-21 00:01:37,431 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:37,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:37,432 INFO L85 PathProgramCache]: Analyzing trace with hash -222747689, now seen corresponding path program 1 times [2022-02-21 00:01:37,432 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:37,432 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529888714] [2022-02-21 00:01:37,432 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:37,432 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:37,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:37,500 INFO L290 TraceCheckUtils]: 0: Hoare triple {7695#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {7695#true} is VALID [2022-02-21 00:01:37,500 INFO L290 TraceCheckUtils]: 1: Hoare triple {7695#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7695#true} is VALID [2022-02-21 00:01:37,501 INFO L290 TraceCheckUtils]: 2: Hoare triple {7695#true} assume { :end_inline__BLAST_init } true; {7695#true} is VALID [2022-02-21 00:01:37,501 INFO L290 TraceCheckUtils]: 3: Hoare triple {7695#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {7695#true} is VALID [2022-02-21 00:01:37,501 INFO L290 TraceCheckUtils]: 4: Hoare triple {7695#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {7695#true} is VALID [2022-02-21 00:01:37,501 INFO L290 TraceCheckUtils]: 5: Hoare triple {7695#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {7695#true} is VALID [2022-02-21 00:01:37,501 INFO L290 TraceCheckUtils]: 6: Hoare triple {7695#true} assume { :end_inline_stub_driver_init } true; {7695#true} is VALID [2022-02-21 00:01:37,503 INFO L290 TraceCheckUtils]: 7: Hoare triple {7695#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {7695#true} is VALID [2022-02-21 00:01:37,503 INFO L290 TraceCheckUtils]: 8: Hoare triple {7695#true} assume 3 == main_~tmp_ndt_1~0#1; {7695#true} is VALID [2022-02-21 00:01:37,503 INFO L290 TraceCheckUtils]: 9: Hoare triple {7695#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {7695#true} is VALID [2022-02-21 00:01:37,504 INFO L290 TraceCheckUtils]: 10: Hoare triple {7695#true} assume 1 == ~PagingReferenceCount~0; {7695#true} is VALID [2022-02-21 00:01:37,504 INFO L290 TraceCheckUtils]: 11: Hoare triple {7695#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {7695#true} is VALID [2022-02-21 00:01:37,504 INFO L290 TraceCheckUtils]: 12: Hoare triple {7695#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {7695#true} is VALID [2022-02-21 00:01:37,504 INFO L290 TraceCheckUtils]: 13: Hoare triple {7695#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {7695#true} is VALID [2022-02-21 00:01:37,505 INFO L290 TraceCheckUtils]: 14: Hoare triple {7695#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {7695#true} is VALID [2022-02-21 00:01:37,505 INFO L290 TraceCheckUtils]: 15: Hoare triple {7695#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {7695#true} is VALID [2022-02-21 00:01:37,506 INFO L290 TraceCheckUtils]: 16: Hoare triple {7695#true} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 1;assume { :begin_inline_FlQueueIrpToThread } true;FlQueueIrpToThread_#in~Irp#1, FlQueueIrpToThread_#in~DisketteExtension#1 := FloppyPnp_~Irp#1, FloppyPnp_~disketteExtension~0#1;havoc FlQueueIrpToThread_#res#1;havoc FlQueueIrpToThread_#t~nondet4#1, FlQueueIrpToThread_#t~nondet5#1, FlQueueIrpToThread_#t~nondet6#1, FlQueueIrpToThread_#t~nondet7#1, FlQueueIrpToThread_#t~nondet8#1, FlQueueIrpToThread_#t~post9#1, FlQueueIrpToThread_#t~post10#1, FlQueueIrpToThread_#t~post11#1, FlQueueIrpToThread_#t~ret12#1, FlQueueIrpToThread_#t~post13#1, FlQueueIrpToThread_#t~ret14#1, FlQueueIrpToThread_#t~ret15#1, FlQueueIrpToThread_~Irp#1, FlQueueIrpToThread_~DisketteExtension#1, FlQueueIrpToThread_~status~0#1, FlQueueIrpToThread_~threadHandle~0#1, FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1, FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1, FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1, FlQueueIrpToThread_~Irp__IoStatus__Status~0#1, FlQueueIrpToThread_~Irp__IoStatus__Information~0#1, FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1, FlQueueIrpToThread_~ObjAttributes~0#1, FlQueueIrpToThread_~__cil_tmp12~0#1, FlQueueIrpToThread_~__cil_tmp13~0#1;FlQueueIrpToThread_~Irp#1 := FlQueueIrpToThread_#in~Irp#1;FlQueueIrpToThread_~DisketteExtension#1 := FlQueueIrpToThread_#in~DisketteExtension#1;havoc FlQueueIrpToThread_~status~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet4#1 && FlQueueIrpToThread_#t~nondet4#1 <= 2147483647;FlQueueIrpToThread_~threadHandle~0#1 := FlQueueIrpToThread_#t~nondet4#1;havoc FlQueueIrpToThread_#t~nondet4#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet5#1 && FlQueueIrpToThread_#t~nondet5#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1 := FlQueueIrpToThread_#t~nondet5#1;havoc FlQueueIrpToThread_#t~nondet5#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet6#1 && FlQueueIrpToThread_#t~nondet6#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1 := FlQueueIrpToThread_#t~nondet6#1;havoc FlQueueIrpToThread_#t~nondet6#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet7#1 && FlQueueIrpToThread_#t~nondet7#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1 := FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Status~0#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Information~0#1;havoc FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet8#1 && FlQueueIrpToThread_#t~nondet8#1 <= 2147483647;FlQueueIrpToThread_~ObjAttributes~0#1 := FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_~__cil_tmp12~0#1;havoc FlQueueIrpToThread_~__cil_tmp13~0#1; {7695#true} is VALID [2022-02-21 00:01:37,506 INFO L290 TraceCheckUtils]: 17: Hoare triple {7695#true} assume 1 == FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1;~myStatus~0 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Status~0#1 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Information~0#1 := 0;FlQueueIrpToThread_#res#1 := -1073741101; {7695#true} is VALID [2022-02-21 00:01:37,506 INFO L290 TraceCheckUtils]: 18: Hoare triple {7695#true} FloppyPnp_#t~ret35#1 := FlQueueIrpToThread_#res#1;assume { :end_inline_FlQueueIrpToThread } true;assume -2147483648 <= FloppyPnp_#t~ret35#1 && FloppyPnp_#t~ret35#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret35#1;havoc FloppyPnp_#t~ret35#1;FloppyPnp_~__cil_tmp29~0#1 := FloppyPnp_~ntStatus~0#1; {7695#true} is VALID [2022-02-21 00:01:37,506 INFO L290 TraceCheckUtils]: 19: Hoare triple {7695#true} assume 259 == FloppyPnp_~__cil_tmp29~0#1; {7695#true} is VALID [2022-02-21 00:01:37,507 INFO L272 TraceCheckUtils]: 20: Hoare triple {7695#true} call FloppyPnp_#t~ret36#1 := KeWaitForSingleObject(FloppyPnp_~disketteExtension__FloppyThread~0#1, ~Executive~0, ~KernelMode~0, 0, 0); {7695#true} is VALID [2022-02-21 00:01:37,508 INFO L290 TraceCheckUtils]: 21: Hoare triple {7695#true} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {7695#true} is VALID [2022-02-21 00:01:37,509 INFO L290 TraceCheckUtils]: 22: Hoare triple {7695#true} assume !(~s~0 == ~MPR3~0); {7697#(not (= ~MPR3~0 ~s~0))} is VALID [2022-02-21 00:01:37,509 INFO L290 TraceCheckUtils]: 23: Hoare triple {7697#(not (= ~MPR3~0 ~s~0))} assume !(1 == ~customIrp~0); {7697#(not (= ~MPR3~0 ~s~0))} is VALID [2022-02-21 00:01:37,510 INFO L290 TraceCheckUtils]: 24: Hoare triple {7697#(not (= ~MPR3~0 ~s~0))} assume ~s~0 == ~MPR3~0; {7696#false} is VALID [2022-02-21 00:01:37,510 INFO L272 TraceCheckUtils]: 25: Hoare triple {7696#false} call errorFn(); {7696#false} is VALID [2022-02-21 00:01:37,510 INFO L290 TraceCheckUtils]: 26: Hoare triple {7696#false} assume !false; {7696#false} is VALID [2022-02-21 00:01:37,510 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:37,511 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:37,511 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529888714] [2022-02-21 00:01:37,511 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [529888714] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:37,511 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:37,512 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-21 00:01:37,512 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2011126327] [2022-02-21 00:01:37,512 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:37,512 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-02-21 00:01:37,513 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:37,513 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:37,531 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 27 edges. 27 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:37,531 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:37,531 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:37,532 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:37,532 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:37,532 INFO L87 Difference]: Start difference. First operand 523 states and 733 transitions. Second operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:37,997 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:37,997 INFO L93 Difference]: Finished difference Result 803 states and 1126 transitions. [2022-02-21 00:01:37,997 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:37,998 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 27 [2022-02-21 00:01:37,998 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:37,998 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:38,001 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 432 transitions. [2022-02-21 00:01:38,002 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:38,005 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 432 transitions. [2022-02-21 00:01:38,005 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 432 transitions. [2022-02-21 00:01:38,307 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 432 edges. 432 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:38,340 INFO L225 Difference]: With dead ends: 803 [2022-02-21 00:01:38,340 INFO L226 Difference]: Without dead ends: 803 [2022-02-21 00:01:38,340 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:38,341 INFO L933 BasicCegarLoop]: 404 mSDtfsCounter, 120 mSDsluCounter, 258 mSDsCounter, 0 mSdLazyCounter, 69 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 120 SdHoareTripleChecker+Valid, 662 SdHoareTripleChecker+Invalid, 72 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 69 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:38,342 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [120 Valid, 662 Invalid, 72 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 69 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-21 00:01:38,343 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 803 states. [2022-02-21 00:01:38,358 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 803 to 614. [2022-02-21 00:01:38,358 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:38,360 INFO L82 GeneralOperation]: Start isEquivalent. First operand 803 states. Second operand has 614 states, 540 states have (on average 1.3685185185185185) internal successors, (739), 550 states have internal predecessors, (739), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:38,361 INFO L74 IsIncluded]: Start isIncluded. First operand 803 states. Second operand has 614 states, 540 states have (on average 1.3685185185185185) internal successors, (739), 550 states have internal predecessors, (739), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:38,363 INFO L87 Difference]: Start difference. First operand 803 states. Second operand has 614 states, 540 states have (on average 1.3685185185185185) internal successors, (739), 550 states have internal predecessors, (739), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:38,398 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:38,399 INFO L93 Difference]: Finished difference Result 803 states and 1126 transitions. [2022-02-21 00:01:38,399 INFO L276 IsEmpty]: Start isEmpty. Operand 803 states and 1126 transitions. [2022-02-21 00:01:38,402 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:38,402 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:38,404 INFO L74 IsIncluded]: Start isIncluded. First operand has 614 states, 540 states have (on average 1.3685185185185185) internal successors, (739), 550 states have internal predecessors, (739), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 803 states. [2022-02-21 00:01:38,405 INFO L87 Difference]: Start difference. First operand has 614 states, 540 states have (on average 1.3685185185185185) internal successors, (739), 550 states have internal predecessors, (739), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 803 states. [2022-02-21 00:01:38,441 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:38,442 INFO L93 Difference]: Finished difference Result 803 states and 1126 transitions. [2022-02-21 00:01:38,442 INFO L276 IsEmpty]: Start isEmpty. Operand 803 states and 1126 transitions. [2022-02-21 00:01:38,444 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:38,445 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:38,445 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:38,445 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:38,447 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 614 states, 540 states have (on average 1.3685185185185185) internal successors, (739), 550 states have internal predecessors, (739), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:38,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 614 states to 614 states and 862 transitions. [2022-02-21 00:01:38,469 INFO L78 Accepts]: Start accepts. Automaton has 614 states and 862 transitions. Word has length 27 [2022-02-21 00:01:38,469 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:38,469 INFO L470 AbstractCegarLoop]: Abstraction has 614 states and 862 transitions. [2022-02-21 00:01:38,470 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 8.333333333333334) internal successors, (25), 3 states have internal predecessors, (25), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:38,470 INFO L276 IsEmpty]: Start isEmpty. Operand 614 states and 862 transitions. [2022-02-21 00:01:38,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 29 [2022-02-21 00:01:38,471 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:38,471 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:38,471 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2022-02-21 00:01:38,471 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:38,472 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:38,472 INFO L85 PathProgramCache]: Analyzing trace with hash 1446649383, now seen corresponding path program 1 times [2022-02-21 00:01:38,472 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:38,472 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [30049910] [2022-02-21 00:01:38,472 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:38,473 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:38,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:38,594 INFO L290 TraceCheckUtils]: 0: Hoare triple {10723#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {10723#true} is VALID [2022-02-21 00:01:38,596 INFO L290 TraceCheckUtils]: 1: Hoare triple {10723#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,596 INFO L290 TraceCheckUtils]: 2: Hoare triple {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume { :end_inline__BLAST_init } true; {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,597 INFO L290 TraceCheckUtils]: 3: Hoare triple {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,597 INFO L290 TraceCheckUtils]: 4: Hoare triple {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,598 INFO L290 TraceCheckUtils]: 5: Hoare triple {10725#(and (= ~NP~0 1) (not (= ~MPR3~0 1)))} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,600 INFO L290 TraceCheckUtils]: 6: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume { :end_inline_stub_driver_init } true; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,600 INFO L290 TraceCheckUtils]: 7: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,601 INFO L290 TraceCheckUtils]: 8: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 3 == main_~tmp_ndt_1~0#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,603 INFO L290 TraceCheckUtils]: 9: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,603 INFO L290 TraceCheckUtils]: 10: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 1 == ~PagingReferenceCount~0; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,612 INFO L290 TraceCheckUtils]: 11: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,612 INFO L290 TraceCheckUtils]: 12: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,615 INFO L290 TraceCheckUtils]: 13: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,616 INFO L290 TraceCheckUtils]: 14: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,616 INFO L290 TraceCheckUtils]: 15: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,617 INFO L290 TraceCheckUtils]: 16: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 1;assume { :begin_inline_FlQueueIrpToThread } true;FlQueueIrpToThread_#in~Irp#1, FlQueueIrpToThread_#in~DisketteExtension#1 := FloppyPnp_~Irp#1, FloppyPnp_~disketteExtension~0#1;havoc FlQueueIrpToThread_#res#1;havoc FlQueueIrpToThread_#t~nondet4#1, FlQueueIrpToThread_#t~nondet5#1, FlQueueIrpToThread_#t~nondet6#1, FlQueueIrpToThread_#t~nondet7#1, FlQueueIrpToThread_#t~nondet8#1, FlQueueIrpToThread_#t~post9#1, FlQueueIrpToThread_#t~post10#1, FlQueueIrpToThread_#t~post11#1, FlQueueIrpToThread_#t~ret12#1, FlQueueIrpToThread_#t~post13#1, FlQueueIrpToThread_#t~ret14#1, FlQueueIrpToThread_#t~ret15#1, FlQueueIrpToThread_~Irp#1, FlQueueIrpToThread_~DisketteExtension#1, FlQueueIrpToThread_~status~0#1, FlQueueIrpToThread_~threadHandle~0#1, FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1, FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1, FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1, FlQueueIrpToThread_~Irp__IoStatus__Status~0#1, FlQueueIrpToThread_~Irp__IoStatus__Information~0#1, FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1, FlQueueIrpToThread_~ObjAttributes~0#1, FlQueueIrpToThread_~__cil_tmp12~0#1, FlQueueIrpToThread_~__cil_tmp13~0#1;FlQueueIrpToThread_~Irp#1 := FlQueueIrpToThread_#in~Irp#1;FlQueueIrpToThread_~DisketteExtension#1 := FlQueueIrpToThread_#in~DisketteExtension#1;havoc FlQueueIrpToThread_~status~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet4#1 && FlQueueIrpToThread_#t~nondet4#1 <= 2147483647;FlQueueIrpToThread_~threadHandle~0#1 := FlQueueIrpToThread_#t~nondet4#1;havoc FlQueueIrpToThread_#t~nondet4#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet5#1 && FlQueueIrpToThread_#t~nondet5#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1 := FlQueueIrpToThread_#t~nondet5#1;havoc FlQueueIrpToThread_#t~nondet5#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet6#1 && FlQueueIrpToThread_#t~nondet6#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1 := FlQueueIrpToThread_#t~nondet6#1;havoc FlQueueIrpToThread_#t~nondet6#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet7#1 && FlQueueIrpToThread_#t~nondet7#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1 := FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Status~0#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Information~0#1;havoc FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet8#1 && FlQueueIrpToThread_#t~nondet8#1 <= 2147483647;FlQueueIrpToThread_~ObjAttributes~0#1 := FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_~__cil_tmp12~0#1;havoc FlQueueIrpToThread_~__cil_tmp13~0#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,618 INFO L290 TraceCheckUtils]: 17: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 1 == FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1;~myStatus~0 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Status~0#1 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Information~0#1 := 0;FlQueueIrpToThread_#res#1 := -1073741101; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,618 INFO L290 TraceCheckUtils]: 18: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} FloppyPnp_#t~ret35#1 := FlQueueIrpToThread_#res#1;assume { :end_inline_FlQueueIrpToThread } true;assume -2147483648 <= FloppyPnp_#t~ret35#1 && FloppyPnp_#t~ret35#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret35#1;havoc FloppyPnp_#t~ret35#1;FloppyPnp_~__cil_tmp29~0#1 := FloppyPnp_~ntStatus~0#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,619 INFO L290 TraceCheckUtils]: 19: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume 259 == FloppyPnp_~__cil_tmp29~0#1; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,620 INFO L272 TraceCheckUtils]: 20: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} call FloppyPnp_#t~ret36#1 := KeWaitForSingleObject(FloppyPnp_~disketteExtension__FloppyThread~0#1, ~Executive~0, ~KernelMode~0, 0, 0); {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,620 INFO L290 TraceCheckUtils]: 21: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} is VALID [2022-02-21 00:01:38,621 INFO L290 TraceCheckUtils]: 22: Hoare triple {10726#(and (= ~s~0 1) (not (= ~MPR3~0 1)))} assume ~s~0 == ~MPR3~0; {10724#false} is VALID [2022-02-21 00:01:38,621 INFO L290 TraceCheckUtils]: 23: Hoare triple {10724#false} assume !(1 == ~setEventCalled~0); {10724#false} is VALID [2022-02-21 00:01:38,622 INFO L290 TraceCheckUtils]: 24: Hoare triple {10724#false} assume !(1 == ~customIrp~0); {10724#false} is VALID [2022-02-21 00:01:38,622 INFO L290 TraceCheckUtils]: 25: Hoare triple {10724#false} assume ~s~0 == ~MPR3~0; {10724#false} is VALID [2022-02-21 00:01:38,622 INFO L272 TraceCheckUtils]: 26: Hoare triple {10724#false} call errorFn(); {10724#false} is VALID [2022-02-21 00:01:38,622 INFO L290 TraceCheckUtils]: 27: Hoare triple {10724#false} assume !false; {10724#false} is VALID [2022-02-21 00:01:38,623 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:38,623 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:38,623 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [30049910] [2022-02-21 00:01:38,623 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [30049910] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:38,624 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:38,624 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-21 00:01:38,624 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [244965510] [2022-02-21 00:01:38,624 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:38,625 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-02-21 00:01:38,625 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:38,625 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:38,649 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 28 edges. 28 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:38,649 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-21 00:01:38,650 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:38,650 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-21 00:01:38,650 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-21 00:01:38,651 INFO L87 Difference]: Start difference. First operand 614 states and 862 transitions. Second operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:39,450 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:39,451 INFO L93 Difference]: Finished difference Result 639 states and 882 transitions. [2022-02-21 00:01:39,451 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-02-21 00:01:39,451 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 28 [2022-02-21 00:01:39,452 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:39,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:39,456 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2022-02-21 00:01:39,457 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:39,460 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 4 states to 4 states and 471 transitions. [2022-02-21 00:01:39,460 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 4 states and 471 transitions. [2022-02-21 00:01:39,859 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 471 edges. 471 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:39,877 INFO L225 Difference]: With dead ends: 639 [2022-02-21 00:01:39,877 INFO L226 Difference]: Without dead ends: 639 [2022-02-21 00:01:39,878 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-21 00:01:39,881 INFO L933 BasicCegarLoop]: 391 mSDtfsCounter, 513 mSDsluCounter, 136 mSDsCounter, 0 mSdLazyCounter, 120 mSolverCounterSat, 61 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 516 SdHoareTripleChecker+Valid, 527 SdHoareTripleChecker+Invalid, 181 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 61 IncrementalHoareTripleChecker+Valid, 120 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:39,881 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [516 Valid, 527 Invalid, 181 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [61 Valid, 120 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:39,883 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 639 states. [2022-02-21 00:01:39,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 639 to 605. [2022-02-21 00:01:39,896 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:39,898 INFO L82 GeneralOperation]: Start isEquivalent. First operand 639 states. Second operand has 605 states, 531 states have (on average 1.3521657250470809) internal successors, (718), 541 states have internal predecessors, (718), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:39,899 INFO L74 IsIncluded]: Start isIncluded. First operand 639 states. Second operand has 605 states, 531 states have (on average 1.3521657250470809) internal successors, (718), 541 states have internal predecessors, (718), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:39,901 INFO L87 Difference]: Start difference. First operand 639 states. Second operand has 605 states, 531 states have (on average 1.3521657250470809) internal successors, (718), 541 states have internal predecessors, (718), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:39,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:39,927 INFO L93 Difference]: Finished difference Result 639 states and 882 transitions. [2022-02-21 00:01:39,927 INFO L276 IsEmpty]: Start isEmpty. Operand 639 states and 882 transitions. [2022-02-21 00:01:39,929 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:39,929 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:39,930 INFO L74 IsIncluded]: Start isIncluded. First operand has 605 states, 531 states have (on average 1.3521657250470809) internal successors, (718), 541 states have internal predecessors, (718), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 639 states. [2022-02-21 00:01:39,932 INFO L87 Difference]: Start difference. First operand has 605 states, 531 states have (on average 1.3521657250470809) internal successors, (718), 541 states have internal predecessors, (718), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 639 states. [2022-02-21 00:01:39,956 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:39,956 INFO L93 Difference]: Finished difference Result 639 states and 882 transitions. [2022-02-21 00:01:39,956 INFO L276 IsEmpty]: Start isEmpty. Operand 639 states and 882 transitions. [2022-02-21 00:01:39,958 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:39,958 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:39,958 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:39,958 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:39,960 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 605 states, 531 states have (on average 1.3521657250470809) internal successors, (718), 541 states have internal predecessors, (718), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:39,983 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 605 states to 605 states and 841 transitions. [2022-02-21 00:01:39,984 INFO L78 Accepts]: Start accepts. Automaton has 605 states and 841 transitions. Word has length 28 [2022-02-21 00:01:39,984 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:39,984 INFO L470 AbstractCegarLoop]: Abstraction has 605 states and 841 transitions. [2022-02-21 00:01:39,984 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 4 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:39,985 INFO L276 IsEmpty]: Start isEmpty. Operand 605 states and 841 transitions. [2022-02-21 00:01:39,985 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 30 [2022-02-21 00:01:39,985 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:39,986 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:39,986 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2022-02-21 00:01:39,986 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:39,987 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:39,987 INFO L85 PathProgramCache]: Analyzing trace with hash -266296252, now seen corresponding path program 1 times [2022-02-21 00:01:39,988 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:39,988 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [576436748] [2022-02-21 00:01:39,988 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:39,988 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:40,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:40,050 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-21 00:01:40,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:40,059 INFO L290 TraceCheckUtils]: 0: Hoare triple {13260#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {13253#true} is VALID [2022-02-21 00:01:40,060 INFO L290 TraceCheckUtils]: 1: Hoare triple {13253#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,060 INFO L290 TraceCheckUtils]: 2: Hoare triple {13259#(= ~s~0 ~DC~0)} assume true; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,061 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {13259#(= ~s~0 ~DC~0)} {13253#true} #747#return; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,061 INFO L290 TraceCheckUtils]: 0: Hoare triple {13253#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {13253#true} is VALID [2022-02-21 00:01:40,061 INFO L290 TraceCheckUtils]: 1: Hoare triple {13253#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13253#true} is VALID [2022-02-21 00:01:40,061 INFO L290 TraceCheckUtils]: 2: Hoare triple {13253#true} assume { :end_inline__BLAST_init } true; {13253#true} is VALID [2022-02-21 00:01:40,061 INFO L290 TraceCheckUtils]: 3: Hoare triple {13253#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {13253#true} is VALID [2022-02-21 00:01:40,062 INFO L290 TraceCheckUtils]: 4: Hoare triple {13253#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {13253#true} is VALID [2022-02-21 00:01:40,062 INFO L290 TraceCheckUtils]: 5: Hoare triple {13253#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {13253#true} is VALID [2022-02-21 00:01:40,062 INFO L290 TraceCheckUtils]: 6: Hoare triple {13253#true} assume { :end_inline_stub_driver_init } true; {13253#true} is VALID [2022-02-21 00:01:40,062 INFO L290 TraceCheckUtils]: 7: Hoare triple {13253#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {13253#true} is VALID [2022-02-21 00:01:40,062 INFO L290 TraceCheckUtils]: 8: Hoare triple {13253#true} assume 3 == main_~tmp_ndt_1~0#1; {13253#true} is VALID [2022-02-21 00:01:40,063 INFO L290 TraceCheckUtils]: 9: Hoare triple {13253#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {13253#true} is VALID [2022-02-21 00:01:40,063 INFO L290 TraceCheckUtils]: 10: Hoare triple {13253#true} assume 1 == ~PagingReferenceCount~0; {13253#true} is VALID [2022-02-21 00:01:40,063 INFO L290 TraceCheckUtils]: 11: Hoare triple {13253#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {13253#true} is VALID [2022-02-21 00:01:40,063 INFO L290 TraceCheckUtils]: 12: Hoare triple {13253#true} assume 0 != FloppyPnp_~disketteExtension__IsRemoved~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := -1073741738;~myStatus~0 := -1073741738; {13253#true} is VALID [2022-02-21 00:01:40,064 INFO L272 TraceCheckUtils]: 13: Hoare triple {13253#true} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {13260#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:40,064 INFO L290 TraceCheckUtils]: 14: Hoare triple {13260#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {13253#true} is VALID [2022-02-21 00:01:40,065 INFO L290 TraceCheckUtils]: 15: Hoare triple {13253#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,065 INFO L290 TraceCheckUtils]: 16: Hoare triple {13259#(= ~s~0 ~DC~0)} assume true; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,066 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {13259#(= ~s~0 ~DC~0)} {13253#true} #747#return; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,066 INFO L290 TraceCheckUtils]: 18: Hoare triple {13259#(= ~s~0 ~DC~0)} FloppyPnp_#res#1 := -1073741738; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,067 INFO L290 TraceCheckUtils]: 19: Hoare triple {13259#(= ~s~0 ~DC~0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,067 INFO L290 TraceCheckUtils]: 20: Hoare triple {13259#(= ~s~0 ~DC~0)} assume !(1 == ~pended~0); {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,067 INFO L290 TraceCheckUtils]: 21: Hoare triple {13259#(= ~s~0 ~DC~0)} assume !(1 == ~pended~0); {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,068 INFO L290 TraceCheckUtils]: 22: Hoare triple {13259#(= ~s~0 ~DC~0)} assume ~s~0 != ~UNLOADED~0; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,068 INFO L290 TraceCheckUtils]: 23: Hoare triple {13259#(= ~s~0 ~DC~0)} assume -1 != main_~status~1#1; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,069 INFO L290 TraceCheckUtils]: 24: Hoare triple {13259#(= ~s~0 ~DC~0)} assume ~s~0 != ~SKIP2~0; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,069 INFO L290 TraceCheckUtils]: 25: Hoare triple {13259#(= ~s~0 ~DC~0)} assume ~s~0 != ~IPC~0; {13259#(= ~s~0 ~DC~0)} is VALID [2022-02-21 00:01:40,069 INFO L290 TraceCheckUtils]: 26: Hoare triple {13259#(= ~s~0 ~DC~0)} assume ~s~0 != ~DC~0; {13254#false} is VALID [2022-02-21 00:01:40,070 INFO L272 TraceCheckUtils]: 27: Hoare triple {13254#false} call errorFn(); {13254#false} is VALID [2022-02-21 00:01:40,070 INFO L290 TraceCheckUtils]: 28: Hoare triple {13254#false} assume !false; {13254#false} is VALID [2022-02-21 00:01:40,070 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:40,070 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:40,070 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [576436748] [2022-02-21 00:01:40,070 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [576436748] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:40,071 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:40,071 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-21 00:01:40,071 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1307821839] [2022-02-21 00:01:40,071 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:40,072 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-02-21 00:01:40,072 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:40,072 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:40,092 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 29 edges. 29 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:40,092 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-21 00:01:40,092 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:40,093 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-21 00:01:40,093 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-21 00:01:40,093 INFO L87 Difference]: Start difference. First operand 605 states and 841 transitions. Second operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:40,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:40,624 INFO L93 Difference]: Finished difference Result 645 states and 893 transitions. [2022-02-21 00:01:40,624 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-21 00:01:40,624 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 29 [2022-02-21 00:01:40,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:40,626 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:40,648 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 350 transitions. [2022-02-21 00:01:40,649 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:40,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 350 transitions. [2022-02-21 00:01:40,652 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 350 transitions. [2022-02-21 00:01:40,915 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 350 edges. 350 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:40,935 INFO L225 Difference]: With dead ends: 645 [2022-02-21 00:01:40,936 INFO L226 Difference]: Without dead ends: 645 [2022-02-21 00:01:40,936 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-21 00:01:40,937 INFO L933 BasicCegarLoop]: 286 mSDtfsCounter, 64 mSDsluCounter, 449 mSDsCounter, 0 mSdLazyCounter, 122 mSolverCounterSat, 30 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 64 SdHoareTripleChecker+Valid, 735 SdHoareTripleChecker+Invalid, 152 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 30 IncrementalHoareTripleChecker+Valid, 122 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:40,937 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [64 Valid, 735 Invalid, 152 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [30 Valid, 122 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-21 00:01:40,938 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 645 states. [2022-02-21 00:01:40,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 645 to 626. [2022-02-21 00:01:40,949 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:40,955 INFO L82 GeneralOperation]: Start isEquivalent. First operand 645 states. Second operand has 626 states, 552 states have (on average 1.3496376811594204) internal successors, (745), 561 states have internal predecessors, (745), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:40,958 INFO L74 IsIncluded]: Start isIncluded. First operand 645 states. Second operand has 626 states, 552 states have (on average 1.3496376811594204) internal successors, (745), 561 states have internal predecessors, (745), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:40,959 INFO L87 Difference]: Start difference. First operand 645 states. Second operand has 626 states, 552 states have (on average 1.3496376811594204) internal successors, (745), 561 states have internal predecessors, (745), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:40,983 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:40,983 INFO L93 Difference]: Finished difference Result 645 states and 893 transitions. [2022-02-21 00:01:40,983 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 893 transitions. [2022-02-21 00:01:40,985 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:40,985 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:40,987 INFO L74 IsIncluded]: Start isIncluded. First operand has 626 states, 552 states have (on average 1.3496376811594204) internal successors, (745), 561 states have internal predecessors, (745), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 645 states. [2022-02-21 00:01:40,988 INFO L87 Difference]: Start difference. First operand has 626 states, 552 states have (on average 1.3496376811594204) internal successors, (745), 561 states have internal predecessors, (745), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 645 states. [2022-02-21 00:01:41,012 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:41,012 INFO L93 Difference]: Finished difference Result 645 states and 893 transitions. [2022-02-21 00:01:41,012 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 893 transitions. [2022-02-21 00:01:41,015 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:41,015 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:41,015 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:41,015 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:41,017 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 626 states, 552 states have (on average 1.3496376811594204) internal successors, (745), 561 states have internal predecessors, (745), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:41,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 626 states to 626 states and 868 transitions. [2022-02-21 00:01:41,040 INFO L78 Accepts]: Start accepts. Automaton has 626 states and 868 transitions. Word has length 29 [2022-02-21 00:01:41,040 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:41,040 INFO L470 AbstractCegarLoop]: Abstraction has 626 states and 868 transitions. [2022-02-21 00:01:41,040 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 6.5) internal successors, (26), 3 states have internal predecessors, (26), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:41,041 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 868 transitions. [2022-02-21 00:01:41,041 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-02-21 00:01:41,041 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:41,042 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:41,042 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2022-02-21 00:01:41,042 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:41,042 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:41,043 INFO L85 PathProgramCache]: Analyzing trace with hash 786936120, now seen corresponding path program 1 times [2022-02-21 00:01:41,043 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:41,043 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1129984918] [2022-02-21 00:01:41,043 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:41,043 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:41,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:41,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-21 00:01:41,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:41,162 INFO L290 TraceCheckUtils]: 0: Hoare triple {15834#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {15826#true} is VALID [2022-02-21 00:01:41,163 INFO L290 TraceCheckUtils]: 1: Hoare triple {15826#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:41,163 INFO L290 TraceCheckUtils]: 2: Hoare triple {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:41,164 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #747#return; {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,165 INFO L290 TraceCheckUtils]: 0: Hoare triple {15826#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {15826#true} is VALID [2022-02-21 00:01:41,166 INFO L290 TraceCheckUtils]: 1: Hoare triple {15826#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,166 INFO L290 TraceCheckUtils]: 2: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume { :end_inline__BLAST_init } true; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,167 INFO L290 TraceCheckUtils]: 3: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,167 INFO L290 TraceCheckUtils]: 4: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,168 INFO L290 TraceCheckUtils]: 5: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,168 INFO L290 TraceCheckUtils]: 6: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume { :end_inline_stub_driver_init } true; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,169 INFO L290 TraceCheckUtils]: 7: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,170 INFO L290 TraceCheckUtils]: 8: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 3 == main_~tmp_ndt_1~0#1; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,171 INFO L290 TraceCheckUtils]: 9: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,171 INFO L290 TraceCheckUtils]: 10: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 1 == ~PagingReferenceCount~0; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,172 INFO L290 TraceCheckUtils]: 11: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,172 INFO L290 TraceCheckUtils]: 12: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} assume 0 != FloppyPnp_~disketteExtension__IsRemoved~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := -1073741738;~myStatus~0 := -1073741738; {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} is VALID [2022-02-21 00:01:41,173 INFO L272 TraceCheckUtils]: 13: Hoare triple {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {15834#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:41,173 INFO L290 TraceCheckUtils]: 14: Hoare triple {15834#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {15826#true} is VALID [2022-02-21 00:01:41,174 INFO L290 TraceCheckUtils]: 15: Hoare triple {15826#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:41,174 INFO L290 TraceCheckUtils]: 16: Hoare triple {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:41,175 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {15835#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {15828#(and (not (= ~SKIP2~0 2)) (= 2 ~DC~0))} #747#return; {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,176 INFO L290 TraceCheckUtils]: 18: Hoare triple {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} FloppyPnp_#res#1 := -1073741738; {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,176 INFO L290 TraceCheckUtils]: 19: Hoare triple {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,177 INFO L290 TraceCheckUtils]: 20: Hoare triple {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,178 INFO L290 TraceCheckUtils]: 21: Hoare triple {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(1 == ~pended~0); {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,178 INFO L290 TraceCheckUtils]: 22: Hoare triple {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume ~s~0 != ~UNLOADED~0; {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,179 INFO L290 TraceCheckUtils]: 23: Hoare triple {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume -1 != main_~status~1#1; {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} is VALID [2022-02-21 00:01:41,179 INFO L290 TraceCheckUtils]: 24: Hoare triple {15833#(and (not (= ~SKIP2~0 2)) (= 2 ~s~0))} assume !(~s~0 != ~SKIP2~0); {15827#false} is VALID [2022-02-21 00:01:41,179 INFO L290 TraceCheckUtils]: 25: Hoare triple {15827#false} assume !(1 == ~pended~0); {15827#false} is VALID [2022-02-21 00:01:41,179 INFO L290 TraceCheckUtils]: 26: Hoare triple {15827#false} assume ~s~0 == ~DC~0; {15827#false} is VALID [2022-02-21 00:01:41,180 INFO L290 TraceCheckUtils]: 27: Hoare triple {15827#false} assume 259 == main_~status~1#1; {15827#false} is VALID [2022-02-21 00:01:41,180 INFO L272 TraceCheckUtils]: 28: Hoare triple {15827#false} call errorFn(); {15827#false} is VALID [2022-02-21 00:01:41,180 INFO L290 TraceCheckUtils]: 29: Hoare triple {15827#false} assume !false; {15827#false} is VALID [2022-02-21 00:01:41,180 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:41,180 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:41,181 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1129984918] [2022-02-21 00:01:41,181 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1129984918] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:41,181 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:41,181 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-21 00:01:41,181 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1471077216] [2022-02-21 00:01:41,181 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:41,182 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-02-21 00:01:41,182 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:41,182 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.5) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:41,204 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:41,205 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-21 00:01:41,205 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:41,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-21 00:01:41,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-21 00:01:41,206 INFO L87 Difference]: Start difference. First operand 626 states and 868 transitions. Second operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:42,306 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:42,307 INFO L93 Difference]: Finished difference Result 645 states and 892 transitions. [2022-02-21 00:01:42,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-21 00:01:42,307 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 30 [2022-02-21 00:01:42,307 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:42,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:42,311 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 348 transitions. [2022-02-21 00:01:42,311 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.5) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:42,314 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 348 transitions. [2022-02-21 00:01:42,314 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 348 transitions. [2022-02-21 00:01:42,597 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 348 edges. 348 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:42,617 INFO L225 Difference]: With dead ends: 645 [2022-02-21 00:01:42,618 INFO L226 Difference]: Without dead ends: 645 [2022-02-21 00:01:42,618 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:01:42,620 INFO L933 BasicCegarLoop]: 285 mSDtfsCounter, 375 mSDsluCounter, 624 mSDsCounter, 0 mSdLazyCounter, 246 mSolverCounterSat, 44 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 382 SdHoareTripleChecker+Valid, 909 SdHoareTripleChecker+Invalid, 290 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 44 IncrementalHoareTripleChecker+Valid, 246 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:42,621 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [382 Valid, 909 Invalid, 290 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [44 Valid, 246 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:42,622 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 645 states. [2022-02-21 00:01:42,632 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 645 to 626. [2022-02-21 00:01:42,632 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:42,634 INFO L82 GeneralOperation]: Start isEquivalent. First operand 645 states. Second operand has 626 states, 552 states have (on average 1.3478260869565217) internal successors, (744), 561 states have internal predecessors, (744), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:42,635 INFO L74 IsIncluded]: Start isIncluded. First operand 645 states. Second operand has 626 states, 552 states have (on average 1.3478260869565217) internal successors, (744), 561 states have internal predecessors, (744), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:42,649 INFO L87 Difference]: Start difference. First operand 645 states. Second operand has 626 states, 552 states have (on average 1.3478260869565217) internal successors, (744), 561 states have internal predecessors, (744), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:42,673 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:42,673 INFO L93 Difference]: Finished difference Result 645 states and 892 transitions. [2022-02-21 00:01:42,673 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 892 transitions. [2022-02-21 00:01:42,676 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:42,676 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:42,678 INFO L74 IsIncluded]: Start isIncluded. First operand has 626 states, 552 states have (on average 1.3478260869565217) internal successors, (744), 561 states have internal predecessors, (744), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 645 states. [2022-02-21 00:01:42,679 INFO L87 Difference]: Start difference. First operand has 626 states, 552 states have (on average 1.3478260869565217) internal successors, (744), 561 states have internal predecessors, (744), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 645 states. [2022-02-21 00:01:42,723 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:42,723 INFO L93 Difference]: Finished difference Result 645 states and 892 transitions. [2022-02-21 00:01:42,724 INFO L276 IsEmpty]: Start isEmpty. Operand 645 states and 892 transitions. [2022-02-21 00:01:42,726 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:42,726 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:42,727 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:42,727 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:42,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 626 states, 552 states have (on average 1.3478260869565217) internal successors, (744), 561 states have internal predecessors, (744), 51 states have call successors, (51), 22 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:42,747 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 626 states to 626 states and 867 transitions. [2022-02-21 00:01:42,748 INFO L78 Accepts]: Start accepts. Automaton has 626 states and 867 transitions. Word has length 30 [2022-02-21 00:01:42,748 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:42,748 INFO L470 AbstractCegarLoop]: Abstraction has 626 states and 867 transitions. [2022-02-21 00:01:42,749 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.5) internal successors, (27), 5 states have internal predecessors, (27), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:42,749 INFO L276 IsEmpty]: Start isEmpty. Operand 626 states and 867 transitions. [2022-02-21 00:01:42,749 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 31 [2022-02-21 00:01:42,750 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:42,750 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:42,750 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2022-02-21 00:01:42,750 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:42,757 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:42,758 INFO L85 PathProgramCache]: Analyzing trace with hash -1995000776, now seen corresponding path program 1 times [2022-02-21 00:01:42,758 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:42,758 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [361967104] [2022-02-21 00:01:42,758 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:42,758 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:42,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:42,817 INFO L290 TraceCheckUtils]: 0: Hoare triple {18406#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {18406#true} is VALID [2022-02-21 00:01:42,817 INFO L290 TraceCheckUtils]: 1: Hoare triple {18406#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18406#true} is VALID [2022-02-21 00:01:42,821 INFO L290 TraceCheckUtils]: 2: Hoare triple {18406#true} assume { :end_inline__BLAST_init } true; {18406#true} is VALID [2022-02-21 00:01:42,821 INFO L290 TraceCheckUtils]: 3: Hoare triple {18406#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {18406#true} is VALID [2022-02-21 00:01:42,821 INFO L290 TraceCheckUtils]: 4: Hoare triple {18406#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {18406#true} is VALID [2022-02-21 00:01:42,821 INFO L290 TraceCheckUtils]: 5: Hoare triple {18406#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {18406#true} is VALID [2022-02-21 00:01:42,821 INFO L290 TraceCheckUtils]: 6: Hoare triple {18406#true} assume { :end_inline_stub_driver_init } true; {18406#true} is VALID [2022-02-21 00:01:42,822 INFO L290 TraceCheckUtils]: 7: Hoare triple {18406#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {18406#true} is VALID [2022-02-21 00:01:42,822 INFO L290 TraceCheckUtils]: 8: Hoare triple {18406#true} assume 3 == main_~tmp_ndt_1~0#1; {18406#true} is VALID [2022-02-21 00:01:42,822 INFO L290 TraceCheckUtils]: 9: Hoare triple {18406#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {18406#true} is VALID [2022-02-21 00:01:42,822 INFO L290 TraceCheckUtils]: 10: Hoare triple {18406#true} assume 1 == ~PagingReferenceCount~0; {18406#true} is VALID [2022-02-21 00:01:42,822 INFO L290 TraceCheckUtils]: 11: Hoare triple {18406#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {18406#true} is VALID [2022-02-21 00:01:42,823 INFO L290 TraceCheckUtils]: 12: Hoare triple {18406#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {18406#true} is VALID [2022-02-21 00:01:42,823 INFO L290 TraceCheckUtils]: 13: Hoare triple {18406#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {18406#true} is VALID [2022-02-21 00:01:42,823 INFO L290 TraceCheckUtils]: 14: Hoare triple {18406#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {18406#true} is VALID [2022-02-21 00:01:42,823 INFO L290 TraceCheckUtils]: 15: Hoare triple {18406#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {18406#true} is VALID [2022-02-21 00:01:42,823 INFO L290 TraceCheckUtils]: 16: Hoare triple {18406#true} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1; {18406#true} is VALID [2022-02-21 00:01:42,824 INFO L290 TraceCheckUtils]: 17: Hoare triple {18406#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,824 INFO L290 TraceCheckUtils]: 18: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} FloppyPnp_#t~post32#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post32#1;havoc FloppyPnp_#t~post32#1;FloppyPnp_#t~post33#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post33#1;havoc FloppyPnp_#t~post33#1; {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,825 INFO L272 TraceCheckUtils]: 19: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} call FloppyPnp_#t~ret34#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,825 INFO L290 TraceCheckUtils]: 20: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,826 INFO L290 TraceCheckUtils]: 21: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} assume !(0 != ~compRegistered~0); {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,826 INFO L290 TraceCheckUtils]: 22: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,827 INFO L290 TraceCheckUtils]: 23: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} assume 0 == ~tmp_ndt_7~0#1; {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,827 INFO L290 TraceCheckUtils]: 24: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} ~returnVal2~0#1 := 0; {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,828 INFO L290 TraceCheckUtils]: 25: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~NP~0); {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,828 INFO L290 TraceCheckUtils]: 26: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~MPR1~0); {18408#(= ~SKIP1~0 ~s~0)} is VALID [2022-02-21 00:01:42,829 INFO L290 TraceCheckUtils]: 27: Hoare triple {18408#(= ~SKIP1~0 ~s~0)} assume !(~s~0 == ~SKIP1~0); {18407#false} is VALID [2022-02-21 00:01:42,829 INFO L272 TraceCheckUtils]: 28: Hoare triple {18407#false} call errorFn(); {18407#false} is VALID [2022-02-21 00:01:42,829 INFO L290 TraceCheckUtils]: 29: Hoare triple {18407#false} assume !false; {18407#false} is VALID [2022-02-21 00:01:42,829 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:42,830 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:42,830 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [361967104] [2022-02-21 00:01:42,830 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [361967104] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:42,830 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:42,830 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-21 00:01:42,830 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1330075857] [2022-02-21 00:01:42,831 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:42,831 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-02-21 00:01:42,831 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:42,831 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:42,851 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 30 edges. 30 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:42,851 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:42,851 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:42,852 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:42,852 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:42,852 INFO L87 Difference]: Start difference. First operand 626 states and 867 transitions. Second operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:43,128 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:43,129 INFO L93 Difference]: Finished difference Result 638 states and 883 transitions. [2022-02-21 00:01:43,129 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:43,129 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 30 [2022-02-21 00:01:43,130 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:43,130 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:43,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 318 transitions. [2022-02-21 00:01:43,132 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:43,135 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 318 transitions. [2022-02-21 00:01:43,135 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 318 transitions. [2022-02-21 00:01:43,359 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 318 edges. 318 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:43,379 INFO L225 Difference]: With dead ends: 638 [2022-02-21 00:01:43,379 INFO L226 Difference]: Without dead ends: 638 [2022-02-21 00:01:43,379 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 4 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:43,380 INFO L933 BasicCegarLoop]: 306 mSDtfsCounter, 16 mSDsluCounter, 241 mSDsCounter, 0 mSdLazyCounter, 46 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 16 SdHoareTripleChecker+Valid, 547 SdHoareTripleChecker+Invalid, 52 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 46 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:43,380 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [16 Valid, 547 Invalid, 52 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 46 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-21 00:01:43,381 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 638 states. [2022-02-21 00:01:43,391 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 638 to 637. [2022-02-21 00:01:43,391 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:43,393 INFO L82 GeneralOperation]: Start isEquivalent. First operand 638 states. Second operand has 637 states, 563 states have (on average 1.3463587921847247) internal successors, (758), 571 states have internal predecessors, (758), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:43,393 INFO L74 IsIncluded]: Start isIncluded. First operand 638 states. Second operand has 637 states, 563 states have (on average 1.3463587921847247) internal successors, (758), 571 states have internal predecessors, (758), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:43,394 INFO L87 Difference]: Start difference. First operand 638 states. Second operand has 637 states, 563 states have (on average 1.3463587921847247) internal successors, (758), 571 states have internal predecessors, (758), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:43,417 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:43,417 INFO L93 Difference]: Finished difference Result 638 states and 883 transitions. [2022-02-21 00:01:43,417 INFO L276 IsEmpty]: Start isEmpty. Operand 638 states and 883 transitions. [2022-02-21 00:01:43,419 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:43,419 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:43,420 INFO L74 IsIncluded]: Start isIncluded. First operand has 637 states, 563 states have (on average 1.3463587921847247) internal successors, (758), 571 states have internal predecessors, (758), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 638 states. [2022-02-21 00:01:43,421 INFO L87 Difference]: Start difference. First operand has 637 states, 563 states have (on average 1.3463587921847247) internal successors, (758), 571 states have internal predecessors, (758), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 638 states. [2022-02-21 00:01:43,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:43,445 INFO L93 Difference]: Finished difference Result 638 states and 883 transitions. [2022-02-21 00:01:43,445 INFO L276 IsEmpty]: Start isEmpty. Operand 638 states and 883 transitions. [2022-02-21 00:01:43,447 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:43,447 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:43,447 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:43,447 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:43,449 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 637 states, 563 states have (on average 1.3463587921847247) internal successors, (758), 571 states have internal predecessors, (758), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:43,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 637 states to 637 states and 881 transitions. [2022-02-21 00:01:43,471 INFO L78 Accepts]: Start accepts. Automaton has 637 states and 881 transitions. Word has length 30 [2022-02-21 00:01:43,472 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:43,472 INFO L470 AbstractCegarLoop]: Abstraction has 637 states and 881 transitions. [2022-02-21 00:01:43,472 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 9.333333333333334) internal successors, (28), 3 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:43,472 INFO L276 IsEmpty]: Start isEmpty. Operand 637 states and 881 transitions. [2022-02-21 00:01:43,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 32 [2022-02-21 00:01:43,473 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:43,473 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:43,473 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2022-02-21 00:01:43,473 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:43,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:43,474 INFO L85 PathProgramCache]: Analyzing trace with hash 2060099377, now seen corresponding path program 1 times [2022-02-21 00:01:43,474 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:43,474 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [857568035] [2022-02-21 00:01:43,474 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:43,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:43,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:43,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-21 00:01:43,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:43,597 INFO L290 TraceCheckUtils]: 0: Hoare triple {20970#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {20962#true} is VALID [2022-02-21 00:01:43,598 INFO L290 TraceCheckUtils]: 1: Hoare triple {20962#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:43,598 INFO L290 TraceCheckUtils]: 2: Hoare triple {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:43,599 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #747#return; {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,600 INFO L290 TraceCheckUtils]: 0: Hoare triple {20962#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {20962#true} is VALID [2022-02-21 00:01:43,600 INFO L290 TraceCheckUtils]: 1: Hoare triple {20962#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,601 INFO L290 TraceCheckUtils]: 2: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume { :end_inline__BLAST_init } true; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,602 INFO L290 TraceCheckUtils]: 3: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,602 INFO L290 TraceCheckUtils]: 4: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,608 INFO L290 TraceCheckUtils]: 5: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,609 INFO L290 TraceCheckUtils]: 6: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume { :end_inline_stub_driver_init } true; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,609 INFO L290 TraceCheckUtils]: 7: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,610 INFO L290 TraceCheckUtils]: 8: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 3 == main_~tmp_ndt_1~0#1; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,615 INFO L290 TraceCheckUtils]: 9: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,616 INFO L290 TraceCheckUtils]: 10: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 1 == ~PagingReferenceCount~0; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,617 INFO L290 TraceCheckUtils]: 11: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,617 INFO L290 TraceCheckUtils]: 12: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} assume 0 != FloppyPnp_~disketteExtension__IsRemoved~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := -1073741738;~myStatus~0 := -1073741738; {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,618 INFO L272 TraceCheckUtils]: 13: Hoare triple {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {20970#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:43,618 INFO L290 TraceCheckUtils]: 14: Hoare triple {20970#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {20962#true} is VALID [2022-02-21 00:01:43,620 INFO L290 TraceCheckUtils]: 15: Hoare triple {20962#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:43,620 INFO L290 TraceCheckUtils]: 16: Hoare triple {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} assume true; {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} is VALID [2022-02-21 00:01:43,621 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {20971#(and (or (not (<= ~s~0 1)) (<= ~DC~0 ~s~0)) (or (<= ~s~0 ~DC~0) (<= ~s~0 2)))} {20964#(and (= 2 ~DC~0) (not (= ~IPC~0 2)))} #747#return; {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,622 INFO L290 TraceCheckUtils]: 18: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} FloppyPnp_#res#1 := -1073741738; {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,623 INFO L290 TraceCheckUtils]: 19: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,623 INFO L290 TraceCheckUtils]: 20: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,626 INFO L290 TraceCheckUtils]: 21: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(1 == ~pended~0); {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,627 INFO L290 TraceCheckUtils]: 22: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~UNLOADED~0; {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,627 INFO L290 TraceCheckUtils]: 23: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume -1 != main_~status~1#1; {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,628 INFO L290 TraceCheckUtils]: 24: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume ~s~0 != ~SKIP2~0; {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} is VALID [2022-02-21 00:01:43,628 INFO L290 TraceCheckUtils]: 25: Hoare triple {20969#(and (= 2 ~s~0) (not (= ~IPC~0 2)))} assume !(~s~0 != ~IPC~0); {20963#false} is VALID [2022-02-21 00:01:43,628 INFO L290 TraceCheckUtils]: 26: Hoare triple {20963#false} assume !(1 == ~pended~0); {20963#false} is VALID [2022-02-21 00:01:43,628 INFO L290 TraceCheckUtils]: 27: Hoare triple {20963#false} assume ~s~0 == ~DC~0; {20963#false} is VALID [2022-02-21 00:01:43,629 INFO L290 TraceCheckUtils]: 28: Hoare triple {20963#false} assume 259 == main_~status~1#1; {20963#false} is VALID [2022-02-21 00:01:43,629 INFO L272 TraceCheckUtils]: 29: Hoare triple {20963#false} call errorFn(); {20963#false} is VALID [2022-02-21 00:01:43,629 INFO L290 TraceCheckUtils]: 30: Hoare triple {20963#false} assume !false; {20963#false} is VALID [2022-02-21 00:01:43,630 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:43,630 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:43,630 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [857568035] [2022-02-21 00:01:43,631 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [857568035] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:43,631 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:43,631 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-21 00:01:43,631 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [475691494] [2022-02-21 00:01:43,631 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:43,632 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-21 00:01:43,632 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:43,632 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:43,669 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 31 edges. 31 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:43,670 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-21 00:01:43,670 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:43,671 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-21 00:01:43,671 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2022-02-21 00:01:43,672 INFO L87 Difference]: Start difference. First operand 637 states and 881 transitions. Second operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:44,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:44,496 INFO L93 Difference]: Finished difference Result 656 states and 905 transitions. [2022-02-21 00:01:44,497 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-21 00:01:44,497 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 31 [2022-02-21 00:01:44,497 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:44,497 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:44,500 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 347 transitions. [2022-02-21 00:01:44,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:44,503 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 347 transitions. [2022-02-21 00:01:44,503 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 347 transitions. [2022-02-21 00:01:44,789 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 347 edges. 347 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:44,809 INFO L225 Difference]: With dead ends: 656 [2022-02-21 00:01:44,809 INFO L226 Difference]: Without dead ends: 656 [2022-02-21 00:01:44,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=27, Invalid=45, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:01:44,810 INFO L933 BasicCegarLoop]: 287 mSDtfsCounter, 390 mSDsluCounter, 416 mSDsCounter, 0 mSdLazyCounter, 160 mSolverCounterSat, 48 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 397 SdHoareTripleChecker+Valid, 703 SdHoareTripleChecker+Invalid, 208 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 48 IncrementalHoareTripleChecker+Valid, 160 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:44,810 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [397 Valid, 703 Invalid, 208 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [48 Valid, 160 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:44,812 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 656 states. [2022-02-21 00:01:44,843 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 656 to 637. [2022-02-21 00:01:44,844 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:44,845 INFO L82 GeneralOperation]: Start isEquivalent. First operand 656 states. Second operand has 637 states, 563 states have (on average 1.344582593250444) internal successors, (757), 571 states have internal predecessors, (757), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:44,846 INFO L74 IsIncluded]: Start isIncluded. First operand 656 states. Second operand has 637 states, 563 states have (on average 1.344582593250444) internal successors, (757), 571 states have internal predecessors, (757), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:44,847 INFO L87 Difference]: Start difference. First operand 656 states. Second operand has 637 states, 563 states have (on average 1.344582593250444) internal successors, (757), 571 states have internal predecessors, (757), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:44,871 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:44,872 INFO L93 Difference]: Finished difference Result 656 states and 905 transitions. [2022-02-21 00:01:44,872 INFO L276 IsEmpty]: Start isEmpty. Operand 656 states and 905 transitions. [2022-02-21 00:01:44,873 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:44,874 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:44,875 INFO L74 IsIncluded]: Start isIncluded. First operand has 637 states, 563 states have (on average 1.344582593250444) internal successors, (757), 571 states have internal predecessors, (757), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 656 states. [2022-02-21 00:01:44,879 INFO L87 Difference]: Start difference. First operand has 637 states, 563 states have (on average 1.344582593250444) internal successors, (757), 571 states have internal predecessors, (757), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) Second operand 656 states. [2022-02-21 00:01:44,902 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:44,903 INFO L93 Difference]: Finished difference Result 656 states and 905 transitions. [2022-02-21 00:01:44,903 INFO L276 IsEmpty]: Start isEmpty. Operand 656 states and 905 transitions. [2022-02-21 00:01:44,905 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:44,905 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:44,905 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:44,905 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:44,907 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 637 states, 563 states have (on average 1.344582593250444) internal successors, (757), 571 states have internal predecessors, (757), 51 states have call successors, (51), 23 states have call predecessors, (51), 22 states have return successors, (72), 43 states have call predecessors, (72), 44 states have call successors, (72) [2022-02-21 00:01:44,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 637 states to 637 states and 880 transitions. [2022-02-21 00:01:44,928 INFO L78 Accepts]: Start accepts. Automaton has 637 states and 880 transitions. Word has length 31 [2022-02-21 00:01:44,929 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:44,929 INFO L470 AbstractCegarLoop]: Abstraction has 637 states and 880 transitions. [2022-02-21 00:01:44,929 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 4.666666666666667) internal successors, (28), 5 states have internal predecessors, (28), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:44,929 INFO L276 IsEmpty]: Start isEmpty. Operand 637 states and 880 transitions. [2022-02-21 00:01:44,931 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 33 [2022-02-21 00:01:44,931 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:44,931 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:44,931 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2022-02-21 00:01:44,932 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:44,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:44,932 INFO L85 PathProgramCache]: Analyzing trace with hash -477345279, now seen corresponding path program 1 times [2022-02-21 00:01:44,932 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:44,933 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1893609026] [2022-02-21 00:01:44,933 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:44,933 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:44,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:44,986 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 13 [2022-02-21 00:01:44,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:44,990 INFO L290 TraceCheckUtils]: 0: Hoare triple {23594#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {23586#true} is VALID [2022-02-21 00:01:44,991 INFO L290 TraceCheckUtils]: 1: Hoare triple {23586#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {23586#true} is VALID [2022-02-21 00:01:44,991 INFO L290 TraceCheckUtils]: 2: Hoare triple {23586#true} assume true; {23586#true} is VALID [2022-02-21 00:01:44,991 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {23586#true} {23586#true} #747#return; {23586#true} is VALID [2022-02-21 00:01:44,991 INFO L290 TraceCheckUtils]: 0: Hoare triple {23586#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {23586#true} is VALID [2022-02-21 00:01:44,991 INFO L290 TraceCheckUtils]: 1: Hoare triple {23586#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23586#true} is VALID [2022-02-21 00:01:44,992 INFO L290 TraceCheckUtils]: 2: Hoare triple {23586#true} assume { :end_inline__BLAST_init } true; {23586#true} is VALID [2022-02-21 00:01:44,992 INFO L290 TraceCheckUtils]: 3: Hoare triple {23586#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {23586#true} is VALID [2022-02-21 00:01:44,992 INFO L290 TraceCheckUtils]: 4: Hoare triple {23586#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {23586#true} is VALID [2022-02-21 00:01:44,992 INFO L290 TraceCheckUtils]: 5: Hoare triple {23586#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {23586#true} is VALID [2022-02-21 00:01:44,992 INFO L290 TraceCheckUtils]: 6: Hoare triple {23586#true} assume { :end_inline_stub_driver_init } true; {23586#true} is VALID [2022-02-21 00:01:44,992 INFO L290 TraceCheckUtils]: 7: Hoare triple {23586#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {23586#true} is VALID [2022-02-21 00:01:44,993 INFO L290 TraceCheckUtils]: 8: Hoare triple {23586#true} assume 3 == main_~tmp_ndt_1~0#1; {23586#true} is VALID [2022-02-21 00:01:44,993 INFO L290 TraceCheckUtils]: 9: Hoare triple {23586#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {23586#true} is VALID [2022-02-21 00:01:44,993 INFO L290 TraceCheckUtils]: 10: Hoare triple {23586#true} assume 1 == ~PagingReferenceCount~0; {23586#true} is VALID [2022-02-21 00:01:44,993 INFO L290 TraceCheckUtils]: 11: Hoare triple {23586#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {23586#true} is VALID [2022-02-21 00:01:44,993 INFO L290 TraceCheckUtils]: 12: Hoare triple {23586#true} assume 0 != FloppyPnp_~disketteExtension__IsRemoved~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := -1073741738;~myStatus~0 := -1073741738; {23586#true} is VALID [2022-02-21 00:01:44,994 INFO L272 TraceCheckUtils]: 13: Hoare triple {23586#true} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {23594#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:44,994 INFO L290 TraceCheckUtils]: 14: Hoare triple {23594#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {23586#true} is VALID [2022-02-21 00:01:44,994 INFO L290 TraceCheckUtils]: 15: Hoare triple {23586#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {23586#true} is VALID [2022-02-21 00:01:44,995 INFO L290 TraceCheckUtils]: 16: Hoare triple {23586#true} assume true; {23586#true} is VALID [2022-02-21 00:01:44,995 INFO L284 TraceCheckUtils]: 17: Hoare quadruple {23586#true} {23586#true} #747#return; {23586#true} is VALID [2022-02-21 00:01:44,995 INFO L290 TraceCheckUtils]: 18: Hoare triple {23586#true} FloppyPnp_#res#1 := -1073741738; {23592#(<= (+ 1073741738 |ULTIMATE.start_FloppyPnp_#res#1|) 0)} is VALID [2022-02-21 00:01:44,996 INFO L290 TraceCheckUtils]: 19: Hoare triple {23592#(<= (+ 1073741738 |ULTIMATE.start_FloppyPnp_#res#1|) 0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,996 INFO L290 TraceCheckUtils]: 20: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume !(1 == ~pended~0); {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,996 INFO L290 TraceCheckUtils]: 21: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume !(1 == ~pended~0); {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,997 INFO L290 TraceCheckUtils]: 22: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume ~s~0 != ~UNLOADED~0; {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,997 INFO L290 TraceCheckUtils]: 23: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume -1 != main_~status~1#1; {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,998 INFO L290 TraceCheckUtils]: 24: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume ~s~0 != ~SKIP2~0; {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,998 INFO L290 TraceCheckUtils]: 25: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume ~s~0 != ~IPC~0; {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,998 INFO L290 TraceCheckUtils]: 26: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume !(~s~0 != ~DC~0); {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,999 INFO L290 TraceCheckUtils]: 27: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume !(1 == ~pended~0); {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,999 INFO L290 TraceCheckUtils]: 28: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume ~s~0 == ~DC~0; {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} is VALID [2022-02-21 00:01:44,999 INFO L290 TraceCheckUtils]: 29: Hoare triple {23593#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741738) 0)} assume 259 == main_~status~1#1; {23587#false} is VALID [2022-02-21 00:01:45,000 INFO L272 TraceCheckUtils]: 30: Hoare triple {23587#false} call errorFn(); {23587#false} is VALID [2022-02-21 00:01:45,000 INFO L290 TraceCheckUtils]: 31: Hoare triple {23587#false} assume !false; {23587#false} is VALID [2022-02-21 00:01:45,002 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:45,002 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:45,002 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1893609026] [2022-02-21 00:01:45,002 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1893609026] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:45,002 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:45,003 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-21 00:01:45,003 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1439864117] [2022-02-21 00:01:45,003 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:45,004 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-02-21 00:01:45,005 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:45,005 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:45,026 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 32 edges. 32 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:45,026 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-21 00:01:45,026 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:45,027 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-21 00:01:45,027 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-21 00:01:45,028 INFO L87 Difference]: Start difference. First operand 637 states and 880 transitions. Second operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:45,687 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:45,688 INFO L93 Difference]: Finished difference Result 665 states and 914 transitions. [2022-02-21 00:01:45,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-21 00:01:45,688 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 32 [2022-02-21 00:01:45,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:45,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:45,692 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 338 transitions. [2022-02-21 00:01:45,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:45,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 338 transitions. [2022-02-21 00:01:45,695 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 338 transitions. [2022-02-21 00:01:45,939 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 338 edges. 338 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:45,961 INFO L225 Difference]: With dead ends: 665 [2022-02-21 00:01:45,961 INFO L226 Difference]: Without dead ends: 652 [2022-02-21 00:01:45,961 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2022-02-21 00:01:45,962 INFO L933 BasicCegarLoop]: 295 mSDtfsCounter, 52 mSDsluCounter, 774 mSDsCounter, 0 mSdLazyCounter, 116 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 52 SdHoareTripleChecker+Valid, 1069 SdHoareTripleChecker+Invalid, 141 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 116 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:45,962 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [52 Valid, 1069 Invalid, 141 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 116 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-21 00:01:45,963 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 652 states. [2022-02-21 00:01:45,976 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 652 to 635. [2022-02-21 00:01:45,976 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:45,977 INFO L82 GeneralOperation]: Start isEquivalent. First operand 652 states. Second operand has 635 states, 562 states have (on average 1.3434163701067616) internal successors, (755), 570 states have internal predecessors, (755), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:45,978 INFO L74 IsIncluded]: Start isIncluded. First operand 652 states. Second operand has 635 states, 562 states have (on average 1.3434163701067616) internal successors, (755), 570 states have internal predecessors, (755), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:45,979 INFO L87 Difference]: Start difference. First operand 652 states. Second operand has 635 states, 562 states have (on average 1.3434163701067616) internal successors, (755), 570 states have internal predecessors, (755), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:46,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:46,003 INFO L93 Difference]: Finished difference Result 652 states and 900 transitions. [2022-02-21 00:01:46,003 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 900 transitions. [2022-02-21 00:01:46,005 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:46,005 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:46,007 INFO L74 IsIncluded]: Start isIncluded. First operand has 635 states, 562 states have (on average 1.3434163701067616) internal successors, (755), 570 states have internal predecessors, (755), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) Second operand 652 states. [2022-02-21 00:01:46,008 INFO L87 Difference]: Start difference. First operand has 635 states, 562 states have (on average 1.3434163701067616) internal successors, (755), 570 states have internal predecessors, (755), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) Second operand 652 states. [2022-02-21 00:01:46,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:46,031 INFO L93 Difference]: Finished difference Result 652 states and 900 transitions. [2022-02-21 00:01:46,032 INFO L276 IsEmpty]: Start isEmpty. Operand 652 states and 900 transitions. [2022-02-21 00:01:46,034 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:46,034 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:46,034 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:46,034 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:46,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 635 states, 562 states have (on average 1.3434163701067616) internal successors, (755), 570 states have internal predecessors, (755), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:46,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 635 states to 635 states and 876 transitions. [2022-02-21 00:01:46,058 INFO L78 Accepts]: Start accepts. Automaton has 635 states and 876 transitions. Word has length 32 [2022-02-21 00:01:46,058 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:46,058 INFO L470 AbstractCegarLoop]: Abstraction has 635 states and 876 transitions. [2022-02-21 00:01:46,059 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 5.8) internal successors, (29), 4 states have internal predecessors, (29), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:46,059 INFO L276 IsEmpty]: Start isEmpty. Operand 635 states and 876 transitions. [2022-02-21 00:01:46,060 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 35 [2022-02-21 00:01:46,060 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:46,060 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:46,060 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2022-02-21 00:01:46,060 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:46,061 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:46,061 INFO L85 PathProgramCache]: Analyzing trace with hash 1919528188, now seen corresponding path program 1 times [2022-02-21 00:01:46,061 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:46,061 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1282457475] [2022-02-21 00:01:46,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:46,062 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:46,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:46,122 INFO L290 TraceCheckUtils]: 0: Hoare triple {26203#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {26203#true} is VALID [2022-02-21 00:01:46,122 INFO L290 TraceCheckUtils]: 1: Hoare triple {26203#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {26203#true} is VALID [2022-02-21 00:01:46,122 INFO L290 TraceCheckUtils]: 2: Hoare triple {26203#true} assume { :end_inline__BLAST_init } true; {26203#true} is VALID [2022-02-21 00:01:46,123 INFO L290 TraceCheckUtils]: 3: Hoare triple {26203#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {26203#true} is VALID [2022-02-21 00:01:46,123 INFO L290 TraceCheckUtils]: 4: Hoare triple {26203#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {26203#true} is VALID [2022-02-21 00:01:46,123 INFO L290 TraceCheckUtils]: 5: Hoare triple {26203#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {26203#true} is VALID [2022-02-21 00:01:46,123 INFO L290 TraceCheckUtils]: 6: Hoare triple {26203#true} assume { :end_inline_stub_driver_init } true; {26203#true} is VALID [2022-02-21 00:01:46,123 INFO L290 TraceCheckUtils]: 7: Hoare triple {26203#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {26203#true} is VALID [2022-02-21 00:01:46,124 INFO L290 TraceCheckUtils]: 8: Hoare triple {26203#true} assume 3 == main_~tmp_ndt_1~0#1; {26203#true} is VALID [2022-02-21 00:01:46,124 INFO L290 TraceCheckUtils]: 9: Hoare triple {26203#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {26203#true} is VALID [2022-02-21 00:01:46,124 INFO L290 TraceCheckUtils]: 10: Hoare triple {26203#true} assume 1 == ~PagingReferenceCount~0; {26203#true} is VALID [2022-02-21 00:01:46,124 INFO L290 TraceCheckUtils]: 11: Hoare triple {26203#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {26203#true} is VALID [2022-02-21 00:01:46,124 INFO L290 TraceCheckUtils]: 12: Hoare triple {26203#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {26203#true} is VALID [2022-02-21 00:01:46,125 INFO L290 TraceCheckUtils]: 13: Hoare triple {26203#true} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {26203#true} is VALID [2022-02-21 00:01:46,125 INFO L290 TraceCheckUtils]: 14: Hoare triple {26203#true} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {26203#true} is VALID [2022-02-21 00:01:46,125 INFO L290 TraceCheckUtils]: 15: Hoare triple {26203#true} assume !(~s~0 != ~NP~0); {26203#true} is VALID [2022-02-21 00:01:46,125 INFO L290 TraceCheckUtils]: 16: Hoare triple {26203#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {26203#true} is VALID [2022-02-21 00:01:46,126 INFO L290 TraceCheckUtils]: 17: Hoare triple {26203#true} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {26203#true} is VALID [2022-02-21 00:01:46,126 INFO L272 TraceCheckUtils]: 18: Hoare triple {26203#true} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {26203#true} is VALID [2022-02-21 00:01:46,126 INFO L290 TraceCheckUtils]: 19: Hoare triple {26203#true} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {26203#true} is VALID [2022-02-21 00:01:46,126 INFO L290 TraceCheckUtils]: 20: Hoare triple {26203#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {26203#true} is VALID [2022-02-21 00:01:46,126 INFO L290 TraceCheckUtils]: 21: Hoare triple {26203#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {26203#true} is VALID [2022-02-21 00:01:46,127 INFO L290 TraceCheckUtils]: 22: Hoare triple {26203#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {26203#true} is VALID [2022-02-21 00:01:46,127 INFO L290 TraceCheckUtils]: 23: Hoare triple {26203#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {26203#true} is VALID [2022-02-21 00:01:46,128 INFO L290 TraceCheckUtils]: 24: Hoare triple {26203#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:46,128 INFO L290 TraceCheckUtils]: 25: Hoare triple {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume { :end_inline_stubMoreProcessingRequired } true; {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:46,129 INFO L290 TraceCheckUtils]: 26: Hoare triple {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:46,129 INFO L290 TraceCheckUtils]: 27: Hoare triple {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume 0 == ~tmp_ndt_7~0#1; {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:46,129 INFO L290 TraceCheckUtils]: 28: Hoare triple {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} ~returnVal2~0#1 := 0; {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:46,130 INFO L290 TraceCheckUtils]: 29: Hoare triple {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~NP~0); {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:46,130 INFO L290 TraceCheckUtils]: 30: Hoare triple {26205#(= (+ ~MPR1~0 (* (- 1) ~s~0)) 0)} assume !(~s~0 == ~MPR1~0); {26204#false} is VALID [2022-02-21 00:01:46,131 INFO L290 TraceCheckUtils]: 31: Hoare triple {26204#false} assume !(~s~0 == ~SKIP1~0); {26204#false} is VALID [2022-02-21 00:01:46,131 INFO L272 TraceCheckUtils]: 32: Hoare triple {26204#false} call errorFn(); {26204#false} is VALID [2022-02-21 00:01:46,131 INFO L290 TraceCheckUtils]: 33: Hoare triple {26204#false} assume !false; {26204#false} is VALID [2022-02-21 00:01:46,131 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:46,132 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:46,132 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1282457475] [2022-02-21 00:01:46,132 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1282457475] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:46,132 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:46,132 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-02-21 00:01:46,133 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [621533235] [2022-02-21 00:01:46,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:46,133 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-02-21 00:01:46,134 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:46,134 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:46,159 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 34 edges. 34 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:46,159 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-02-21 00:01:46,160 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:46,160 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-02-21 00:01:46,160 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:46,161 INFO L87 Difference]: Start difference. First operand 635 states and 876 transitions. Second operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:46,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:46,464 INFO L93 Difference]: Finished difference Result 643 states and 887 transitions. [2022-02-21 00:01:46,465 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-02-21 00:01:46,465 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Word has length 34 [2022-02-21 00:01:46,465 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:46,465 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:46,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 308 transitions. [2022-02-21 00:01:46,468 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:46,470 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3 states to 3 states and 308 transitions. [2022-02-21 00:01:46,470 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 3 states and 308 transitions. [2022-02-21 00:01:46,688 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 308 edges. 308 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:46,707 INFO L225 Difference]: With dead ends: 643 [2022-02-21 00:01:46,708 INFO L226 Difference]: Without dead ends: 643 [2022-02-21 00:01:46,708 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 3 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-02-21 00:01:46,709 INFO L933 BasicCegarLoop]: 304 mSDtfsCounter, 5 mSDsluCounter, 254 mSDsCounter, 0 mSdLazyCounter, 42 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5 SdHoareTripleChecker+Valid, 558 SdHoareTripleChecker+Invalid, 44 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 42 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:46,709 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5 Valid, 558 Invalid, 44 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 42 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-02-21 00:01:46,710 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 643 states. [2022-02-21 00:01:46,720 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 643 to 643. [2022-02-21 00:01:46,721 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:46,722 INFO L82 GeneralOperation]: Start isEquivalent. First operand 643 states. Second operand has 643 states, 570 states have (on average 1.343859649122807) internal successors, (766), 578 states have internal predecessors, (766), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:46,723 INFO L74 IsIncluded]: Start isIncluded. First operand 643 states. Second operand has 643 states, 570 states have (on average 1.343859649122807) internal successors, (766), 578 states have internal predecessors, (766), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:46,724 INFO L87 Difference]: Start difference. First operand 643 states. Second operand has 643 states, 570 states have (on average 1.343859649122807) internal successors, (766), 578 states have internal predecessors, (766), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:46,744 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:46,745 INFO L93 Difference]: Finished difference Result 643 states and 887 transitions. [2022-02-21 00:01:46,745 INFO L276 IsEmpty]: Start isEmpty. Operand 643 states and 887 transitions. [2022-02-21 00:01:46,747 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:46,747 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:46,748 INFO L74 IsIncluded]: Start isIncluded. First operand has 643 states, 570 states have (on average 1.343859649122807) internal successors, (766), 578 states have internal predecessors, (766), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) Second operand 643 states. [2022-02-21 00:01:46,749 INFO L87 Difference]: Start difference. First operand has 643 states, 570 states have (on average 1.343859649122807) internal successors, (766), 578 states have internal predecessors, (766), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) Second operand 643 states. [2022-02-21 00:01:46,770 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:46,771 INFO L93 Difference]: Finished difference Result 643 states and 887 transitions. [2022-02-21 00:01:46,771 INFO L276 IsEmpty]: Start isEmpty. Operand 643 states and 887 transitions. [2022-02-21 00:01:46,773 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:46,773 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:46,773 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:46,773 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:46,775 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 643 states, 570 states have (on average 1.343859649122807) internal successors, (766), 578 states have internal predecessors, (766), 50 states have call successors, (50), 23 states have call predecessors, (50), 22 states have return successors, (71), 42 states have call predecessors, (71), 43 states have call successors, (71) [2022-02-21 00:01:46,794 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 643 states to 643 states and 887 transitions. [2022-02-21 00:01:46,795 INFO L78 Accepts]: Start accepts. Automaton has 643 states and 887 transitions. Word has length 34 [2022-02-21 00:01:46,795 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:46,795 INFO L470 AbstractCegarLoop]: Abstraction has 643 states and 887 transitions. [2022-02-21 00:01:46,796 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 10.666666666666666) internal successors, (32), 3 states have internal predecessors, (32), 2 states have call successors, (2), 2 states have call predecessors, (2), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-02-21 00:01:46,796 INFO L276 IsEmpty]: Start isEmpty. Operand 643 states and 887 transitions. [2022-02-21 00:01:46,797 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 39 [2022-02-21 00:01:46,797 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:46,797 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:46,797 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2022-02-21 00:01:46,797 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:46,798 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:46,798 INFO L85 PathProgramCache]: Analyzing trace with hash 197237323, now seen corresponding path program 1 times [2022-02-21 00:01:46,798 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:46,798 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1140621102] [2022-02-21 00:01:46,798 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:46,799 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:46,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:46,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-21 00:01:46,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:46,870 INFO L290 TraceCheckUtils]: 0: Hoare triple {28792#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {28780#true} is VALID [2022-02-21 00:01:46,871 INFO L290 TraceCheckUtils]: 1: Hoare triple {28780#true} assume !(0 != ~compRegistered~0); {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,871 INFO L290 TraceCheckUtils]: 2: Hoare triple {28793#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,876 INFO L290 TraceCheckUtils]: 3: Hoare triple {28793#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_7~0#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,877 INFO L290 TraceCheckUtils]: 4: Hoare triple {28793#(<= ~compRegistered~0 0)} ~returnVal2~0#1 := 0; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,878 INFO L290 TraceCheckUtils]: 5: Hoare triple {28793#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,878 INFO L290 TraceCheckUtils]: 6: Hoare triple {28793#(<= ~compRegistered~0 0)} #res#1 := ~returnVal2~0#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,878 INFO L290 TraceCheckUtils]: 7: Hoare triple {28793#(<= ~compRegistered~0 0)} assume true; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,879 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {28793#(<= ~compRegistered~0 0)} {28782#(= ~compRegistered~0 1)} #753#return; {28781#false} is VALID [2022-02-21 00:01:46,879 INFO L290 TraceCheckUtils]: 0: Hoare triple {28780#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {28780#true} is VALID [2022-02-21 00:01:46,880 INFO L290 TraceCheckUtils]: 1: Hoare triple {28780#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28780#true} is VALID [2022-02-21 00:01:46,880 INFO L290 TraceCheckUtils]: 2: Hoare triple {28780#true} assume { :end_inline__BLAST_init } true; {28780#true} is VALID [2022-02-21 00:01:46,880 INFO L290 TraceCheckUtils]: 3: Hoare triple {28780#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {28780#true} is VALID [2022-02-21 00:01:46,880 INFO L290 TraceCheckUtils]: 4: Hoare triple {28780#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {28780#true} is VALID [2022-02-21 00:01:46,880 INFO L290 TraceCheckUtils]: 5: Hoare triple {28780#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {28780#true} is VALID [2022-02-21 00:01:46,880 INFO L290 TraceCheckUtils]: 6: Hoare triple {28780#true} assume { :end_inline_stub_driver_init } true; {28780#true} is VALID [2022-02-21 00:01:46,881 INFO L290 TraceCheckUtils]: 7: Hoare triple {28780#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {28780#true} is VALID [2022-02-21 00:01:46,881 INFO L290 TraceCheckUtils]: 8: Hoare triple {28780#true} assume 3 == main_~tmp_ndt_1~0#1; {28780#true} is VALID [2022-02-21 00:01:46,881 INFO L290 TraceCheckUtils]: 9: Hoare triple {28780#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {28780#true} is VALID [2022-02-21 00:01:46,881 INFO L290 TraceCheckUtils]: 10: Hoare triple {28780#true} assume 1 == ~PagingReferenceCount~0; {28780#true} is VALID [2022-02-21 00:01:46,881 INFO L290 TraceCheckUtils]: 11: Hoare triple {28780#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {28780#true} is VALID [2022-02-21 00:01:46,881 INFO L290 TraceCheckUtils]: 12: Hoare triple {28780#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {28780#true} is VALID [2022-02-21 00:01:46,882 INFO L290 TraceCheckUtils]: 13: Hoare triple {28780#true} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {28780#true} is VALID [2022-02-21 00:01:46,883 INFO L290 TraceCheckUtils]: 14: Hoare triple {28780#true} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {28780#true} is VALID [2022-02-21 00:01:46,883 INFO L290 TraceCheckUtils]: 15: Hoare triple {28780#true} assume !(~s~0 != ~NP~0); {28780#true} is VALID [2022-02-21 00:01:46,883 INFO L290 TraceCheckUtils]: 16: Hoare triple {28780#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {28782#(= ~compRegistered~0 1)} is VALID [2022-02-21 00:01:46,884 INFO L290 TraceCheckUtils]: 17: Hoare triple {28782#(= ~compRegistered~0 1)} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {28782#(= ~compRegistered~0 1)} is VALID [2022-02-21 00:01:46,885 INFO L272 TraceCheckUtils]: 18: Hoare triple {28782#(= ~compRegistered~0 1)} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {28792#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:46,885 INFO L290 TraceCheckUtils]: 19: Hoare triple {28792#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {28780#true} is VALID [2022-02-21 00:01:46,885 INFO L290 TraceCheckUtils]: 20: Hoare triple {28780#true} assume !(0 != ~compRegistered~0); {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,885 INFO L290 TraceCheckUtils]: 21: Hoare triple {28793#(<= ~compRegistered~0 0)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,886 INFO L290 TraceCheckUtils]: 22: Hoare triple {28793#(<= ~compRegistered~0 0)} assume 0 == ~tmp_ndt_7~0#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,887 INFO L290 TraceCheckUtils]: 23: Hoare triple {28793#(<= ~compRegistered~0 0)} ~returnVal2~0#1 := 0; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,888 INFO L290 TraceCheckUtils]: 24: Hoare triple {28793#(<= ~compRegistered~0 0)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,889 INFO L290 TraceCheckUtils]: 25: Hoare triple {28793#(<= ~compRegistered~0 0)} #res#1 := ~returnVal2~0#1; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,891 INFO L290 TraceCheckUtils]: 26: Hoare triple {28793#(<= ~compRegistered~0 0)} assume true; {28793#(<= ~compRegistered~0 0)} is VALID [2022-02-21 00:01:46,892 INFO L284 TraceCheckUtils]: 27: Hoare quadruple {28793#(<= ~compRegistered~0 0)} {28782#(= ~compRegistered~0 1)} #753#return; {28781#false} is VALID [2022-02-21 00:01:46,893 INFO L290 TraceCheckUtils]: 28: Hoare triple {28781#false} assume -2147483648 <= FloppyStartDevice_#t~ret74#1 && FloppyStartDevice_#t~ret74#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret74#1;havoc FloppyStartDevice_#t~ret74#1;FloppyStartDevice_~__cil_tmp42~0#1 := FloppyStartDevice_~ntStatus~1#1; {28781#false} is VALID [2022-02-21 00:01:46,893 INFO L290 TraceCheckUtils]: 29: Hoare triple {28781#false} assume 259 == FloppyStartDevice_~__cil_tmp42~0#1; {28781#false} is VALID [2022-02-21 00:01:46,893 INFO L272 TraceCheckUtils]: 30: Hoare triple {28781#false} call FloppyStartDevice_#t~ret75#1 := KeWaitForSingleObject(FloppyStartDevice_~doneEvent~1#1, ~Executive~0, ~KernelMode~0, 0, 0); {28781#false} is VALID [2022-02-21 00:01:46,893 INFO L290 TraceCheckUtils]: 31: Hoare triple {28781#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {28781#false} is VALID [2022-02-21 00:01:46,893 INFO L290 TraceCheckUtils]: 32: Hoare triple {28781#false} assume ~s~0 == ~MPR3~0; {28781#false} is VALID [2022-02-21 00:01:46,893 INFO L290 TraceCheckUtils]: 33: Hoare triple {28781#false} assume !(1 == ~setEventCalled~0); {28781#false} is VALID [2022-02-21 00:01:46,894 INFO L290 TraceCheckUtils]: 34: Hoare triple {28781#false} assume !(1 == ~customIrp~0); {28781#false} is VALID [2022-02-21 00:01:46,894 INFO L290 TraceCheckUtils]: 35: Hoare triple {28781#false} assume ~s~0 == ~MPR3~0; {28781#false} is VALID [2022-02-21 00:01:46,894 INFO L272 TraceCheckUtils]: 36: Hoare triple {28781#false} call errorFn(); {28781#false} is VALID [2022-02-21 00:01:46,894 INFO L290 TraceCheckUtils]: 37: Hoare triple {28781#false} assume !false; {28781#false} is VALID [2022-02-21 00:01:46,894 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:46,895 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:46,895 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1140621102] [2022-02-21 00:01:46,895 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1140621102] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:46,895 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:46,895 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-02-21 00:01:46,895 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617063577] [2022-02-21 00:01:46,896 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:46,896 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2022-02-21 00:01:46,896 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:46,897 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:46,922 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 38 edges. 38 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:46,923 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-02-21 00:01:46,923 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:46,923 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-02-21 00:01:46,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-02-21 00:01:46,924 INFO L87 Difference]: Start difference. First operand 643 states and 887 transitions. Second operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:47,717 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:47,718 INFO L93 Difference]: Finished difference Result 468 states and 616 transitions. [2022-02-21 00:01:47,718 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-21 00:01:47,718 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 38 [2022-02-21 00:01:47,719 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:47,719 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:47,721 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 368 transitions. [2022-02-21 00:01:47,722 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:47,724 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 368 transitions. [2022-02-21 00:01:47,724 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 368 transitions. [2022-02-21 00:01:48,004 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 368 edges. 368 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:48,015 INFO L225 Difference]: With dead ends: 468 [2022-02-21 00:01:48,016 INFO L226 Difference]: Without dead ends: 468 [2022-02-21 00:01:48,016 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-02-21 00:01:48,017 INFO L933 BasicCegarLoop]: 347 mSDtfsCounter, 382 mSDsluCounter, 477 mSDsCounter, 0 mSdLazyCounter, 197 mSolverCounterSat, 38 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 384 SdHoareTripleChecker+Valid, 824 SdHoareTripleChecker+Invalid, 235 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 38 IncrementalHoareTripleChecker+Valid, 197 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:48,017 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [384 Valid, 824 Invalid, 235 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [38 Valid, 197 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:48,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2022-02-21 00:01:48,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 427. [2022-02-21 00:01:48,025 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:48,026 INFO L82 GeneralOperation]: Start isEquivalent. First operand 468 states. Second operand has 427 states, 375 states have (on average 1.312) internal successors, (492), 383 states have internal predecessors, (492), 35 states have call successors, (35), 16 states have call predecessors, (35), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:48,026 INFO L74 IsIncluded]: Start isIncluded. First operand 468 states. Second operand has 427 states, 375 states have (on average 1.312) internal successors, (492), 383 states have internal predecessors, (492), 35 states have call successors, (35), 16 states have call predecessors, (35), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:48,027 INFO L87 Difference]: Start difference. First operand 468 states. Second operand has 427 states, 375 states have (on average 1.312) internal successors, (492), 383 states have internal predecessors, (492), 35 states have call successors, (35), 16 states have call predecessors, (35), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:48,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:48,039 INFO L93 Difference]: Finished difference Result 468 states and 616 transitions. [2022-02-21 00:01:48,040 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 616 transitions. [2022-02-21 00:01:48,041 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:48,041 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:48,042 INFO L74 IsIncluded]: Start isIncluded. First operand has 427 states, 375 states have (on average 1.312) internal successors, (492), 383 states have internal predecessors, (492), 35 states have call successors, (35), 16 states have call predecessors, (35), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) Second operand 468 states. [2022-02-21 00:01:48,042 INFO L87 Difference]: Start difference. First operand has 427 states, 375 states have (on average 1.312) internal successors, (492), 383 states have internal predecessors, (492), 35 states have call successors, (35), 16 states have call predecessors, (35), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) Second operand 468 states. [2022-02-21 00:01:48,055 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:48,055 INFO L93 Difference]: Finished difference Result 468 states and 616 transitions. [2022-02-21 00:01:48,055 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 616 transitions. [2022-02-21 00:01:48,056 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:48,056 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:48,057 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:48,057 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:48,058 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 427 states, 375 states have (on average 1.312) internal successors, (492), 383 states have internal predecessors, (492), 35 states have call successors, (35), 16 states have call predecessors, (35), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:48,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 427 states to 427 states and 566 transitions. [2022-02-21 00:01:48,068 INFO L78 Accepts]: Start accepts. Automaton has 427 states and 566 transitions. Word has length 38 [2022-02-21 00:01:48,068 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:48,068 INFO L470 AbstractCegarLoop]: Abstraction has 427 states and 566 transitions. [2022-02-21 00:01:48,068 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.8) internal successors, (34), 4 states have internal predecessors, (34), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:48,068 INFO L276 IsEmpty]: Start isEmpty. Operand 427 states and 566 transitions. [2022-02-21 00:01:48,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-02-21 00:01:48,069 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:48,070 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:48,070 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable13 [2022-02-21 00:01:48,070 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:48,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:48,070 INFO L85 PathProgramCache]: Analyzing trace with hash 1089851695, now seen corresponding path program 1 times [2022-02-21 00:01:48,071 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:48,071 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1153625007] [2022-02-21 00:01:48,071 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:48,071 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:48,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:48,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-21 00:01:48,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:48,223 INFO L290 TraceCheckUtils]: 0: Hoare triple {30649#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {30633#true} is VALID [2022-02-21 00:01:48,224 INFO L290 TraceCheckUtils]: 1: Hoare triple {30633#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {30633#true} is VALID [2022-02-21 00:01:48,224 INFO L290 TraceCheckUtils]: 2: Hoare triple {30633#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {30650#(and (<= (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|) 0) (<= 0 (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|)))} is VALID [2022-02-21 00:01:48,225 INFO L290 TraceCheckUtils]: 3: Hoare triple {30650#(and (<= (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|) 0) (<= 0 (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|)))} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {30651#(and (<= 0 (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802)) (<= (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802) 0))} is VALID [2022-02-21 00:01:48,226 INFO L290 TraceCheckUtils]: 4: Hoare triple {30651#(and (<= 0 (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802)) (<= (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802) 0))} assume !(3221225494 == ~__cil_tmp7~0#1 % 4294967296); {30634#false} is VALID [2022-02-21 00:01:48,226 INFO L290 TraceCheckUtils]: 5: Hoare triple {30634#false} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {30634#false} is VALID [2022-02-21 00:01:48,226 INFO L290 TraceCheckUtils]: 6: Hoare triple {30634#false} assume 0 == ~tmp_ndt_7~0#1; {30634#false} is VALID [2022-02-21 00:01:48,226 INFO L290 TraceCheckUtils]: 7: Hoare triple {30634#false} ~returnVal2~0#1 := 0; {30634#false} is VALID [2022-02-21 00:01:48,226 INFO L290 TraceCheckUtils]: 8: Hoare triple {30634#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {30634#false} is VALID [2022-02-21 00:01:48,227 INFO L290 TraceCheckUtils]: 9: Hoare triple {30634#false} #res#1 := ~returnVal2~0#1; {30634#false} is VALID [2022-02-21 00:01:48,228 INFO L290 TraceCheckUtils]: 10: Hoare triple {30634#false} assume true; {30634#false} is VALID [2022-02-21 00:01:48,228 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {30634#false} {30633#true} #753#return; {30647#(= 0 |ULTIMATE.start_FloppyStartDevice_#t~ret74#1|)} is VALID [2022-02-21 00:01:48,228 INFO L290 TraceCheckUtils]: 0: Hoare triple {30633#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {30633#true} is VALID [2022-02-21 00:01:48,228 INFO L290 TraceCheckUtils]: 1: Hoare triple {30633#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {30633#true} is VALID [2022-02-21 00:01:48,228 INFO L290 TraceCheckUtils]: 2: Hoare triple {30633#true} assume { :end_inline__BLAST_init } true; {30633#true} is VALID [2022-02-21 00:01:48,229 INFO L290 TraceCheckUtils]: 3: Hoare triple {30633#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {30633#true} is VALID [2022-02-21 00:01:48,229 INFO L290 TraceCheckUtils]: 4: Hoare triple {30633#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {30633#true} is VALID [2022-02-21 00:01:48,229 INFO L290 TraceCheckUtils]: 5: Hoare triple {30633#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {30633#true} is VALID [2022-02-21 00:01:48,229 INFO L290 TraceCheckUtils]: 6: Hoare triple {30633#true} assume { :end_inline_stub_driver_init } true; {30633#true} is VALID [2022-02-21 00:01:48,229 INFO L290 TraceCheckUtils]: 7: Hoare triple {30633#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {30633#true} is VALID [2022-02-21 00:01:48,229 INFO L290 TraceCheckUtils]: 8: Hoare triple {30633#true} assume 3 == main_~tmp_ndt_1~0#1; {30633#true} is VALID [2022-02-21 00:01:48,229 INFO L290 TraceCheckUtils]: 9: Hoare triple {30633#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {30633#true} is VALID [2022-02-21 00:01:48,230 INFO L290 TraceCheckUtils]: 10: Hoare triple {30633#true} assume 1 == ~PagingReferenceCount~0; {30633#true} is VALID [2022-02-21 00:01:48,230 INFO L290 TraceCheckUtils]: 11: Hoare triple {30633#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {30633#true} is VALID [2022-02-21 00:01:48,230 INFO L290 TraceCheckUtils]: 12: Hoare triple {30633#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {30633#true} is VALID [2022-02-21 00:01:48,230 INFO L290 TraceCheckUtils]: 13: Hoare triple {30633#true} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {30633#true} is VALID [2022-02-21 00:01:48,230 INFO L290 TraceCheckUtils]: 14: Hoare triple {30633#true} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {30633#true} is VALID [2022-02-21 00:01:48,231 INFO L290 TraceCheckUtils]: 15: Hoare triple {30633#true} assume !(~s~0 != ~NP~0); {30633#true} is VALID [2022-02-21 00:01:48,231 INFO L290 TraceCheckUtils]: 16: Hoare triple {30633#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {30633#true} is VALID [2022-02-21 00:01:48,231 INFO L290 TraceCheckUtils]: 17: Hoare triple {30633#true} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {30633#true} is VALID [2022-02-21 00:01:48,232 INFO L272 TraceCheckUtils]: 18: Hoare triple {30633#true} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {30649#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:48,232 INFO L290 TraceCheckUtils]: 19: Hoare triple {30649#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {30633#true} is VALID [2022-02-21 00:01:48,232 INFO L290 TraceCheckUtils]: 20: Hoare triple {30633#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {30633#true} is VALID [2022-02-21 00:01:48,233 INFO L290 TraceCheckUtils]: 21: Hoare triple {30633#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {30650#(and (<= (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|) 0) (<= 0 (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|)))} is VALID [2022-02-21 00:01:48,233 INFO L290 TraceCheckUtils]: 22: Hoare triple {30650#(and (<= (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|) 0) (<= 0 (+ 1073741802 |IofCallDriver_FloppyPnpComplete_#res#1|)))} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {30651#(and (<= 0 (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802)) (<= (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802) 0))} is VALID [2022-02-21 00:01:48,234 INFO L290 TraceCheckUtils]: 23: Hoare triple {30651#(and (<= 0 (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802)) (<= (+ |IofCallDriver_~__cil_tmp7~0#1| 1073741802) 0))} assume !(3221225494 == ~__cil_tmp7~0#1 % 4294967296); {30634#false} is VALID [2022-02-21 00:01:48,234 INFO L290 TraceCheckUtils]: 24: Hoare triple {30634#false} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {30634#false} is VALID [2022-02-21 00:01:48,234 INFO L290 TraceCheckUtils]: 25: Hoare triple {30634#false} assume 0 == ~tmp_ndt_7~0#1; {30634#false} is VALID [2022-02-21 00:01:48,234 INFO L290 TraceCheckUtils]: 26: Hoare triple {30634#false} ~returnVal2~0#1 := 0; {30634#false} is VALID [2022-02-21 00:01:48,235 INFO L290 TraceCheckUtils]: 27: Hoare triple {30634#false} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {30634#false} is VALID [2022-02-21 00:01:48,235 INFO L290 TraceCheckUtils]: 28: Hoare triple {30634#false} #res#1 := ~returnVal2~0#1; {30634#false} is VALID [2022-02-21 00:01:48,235 INFO L290 TraceCheckUtils]: 29: Hoare triple {30634#false} assume true; {30634#false} is VALID [2022-02-21 00:01:48,235 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {30634#false} {30633#true} #753#return; {30647#(= 0 |ULTIMATE.start_FloppyStartDevice_#t~ret74#1|)} is VALID [2022-02-21 00:01:48,236 INFO L290 TraceCheckUtils]: 31: Hoare triple {30647#(= 0 |ULTIMATE.start_FloppyStartDevice_#t~ret74#1|)} assume -2147483648 <= FloppyStartDevice_#t~ret74#1 && FloppyStartDevice_#t~ret74#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret74#1;havoc FloppyStartDevice_#t~ret74#1;FloppyStartDevice_~__cil_tmp42~0#1 := FloppyStartDevice_~ntStatus~1#1; {30648#(= |ULTIMATE.start_FloppyStartDevice_~__cil_tmp42~0#1| 0)} is VALID [2022-02-21 00:01:48,236 INFO L290 TraceCheckUtils]: 32: Hoare triple {30648#(= |ULTIMATE.start_FloppyStartDevice_~__cil_tmp42~0#1| 0)} assume 259 == FloppyStartDevice_~__cil_tmp42~0#1; {30634#false} is VALID [2022-02-21 00:01:48,236 INFO L272 TraceCheckUtils]: 33: Hoare triple {30634#false} call FloppyStartDevice_#t~ret75#1 := KeWaitForSingleObject(FloppyStartDevice_~doneEvent~1#1, ~Executive~0, ~KernelMode~0, 0, 0); {30634#false} is VALID [2022-02-21 00:01:48,236 INFO L290 TraceCheckUtils]: 34: Hoare triple {30634#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {30634#false} is VALID [2022-02-21 00:01:48,236 INFO L290 TraceCheckUtils]: 35: Hoare triple {30634#false} assume ~s~0 == ~MPR3~0; {30634#false} is VALID [2022-02-21 00:01:48,237 INFO L290 TraceCheckUtils]: 36: Hoare triple {30634#false} assume !(1 == ~setEventCalled~0); {30634#false} is VALID [2022-02-21 00:01:48,237 INFO L290 TraceCheckUtils]: 37: Hoare triple {30634#false} assume !(1 == ~customIrp~0); {30634#false} is VALID [2022-02-21 00:01:48,237 INFO L290 TraceCheckUtils]: 38: Hoare triple {30634#false} assume ~s~0 == ~MPR3~0; {30634#false} is VALID [2022-02-21 00:01:48,237 INFO L272 TraceCheckUtils]: 39: Hoare triple {30634#false} call errorFn(); {30634#false} is VALID [2022-02-21 00:01:48,237 INFO L290 TraceCheckUtils]: 40: Hoare triple {30634#false} assume !false; {30634#false} is VALID [2022-02-21 00:01:48,238 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:48,238 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:48,238 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1153625007] [2022-02-21 00:01:48,239 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1153625007] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:48,239 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:48,239 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-21 00:01:48,239 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1210804185] [2022-02-21 00:01:48,239 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:48,240 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 41 [2022-02-21 00:01:48,240 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:48,241 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:48,277 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:48,278 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-21 00:01:48,278 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:48,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-21 00:01:48,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-21 00:01:48,279 INFO L87 Difference]: Start difference. First operand 427 states and 566 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:49,344 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:49,344 INFO L93 Difference]: Finished difference Result 422 states and 554 transitions. [2022-02-21 00:01:49,344 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-21 00:01:49,344 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 41 [2022-02-21 00:01:49,345 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:49,345 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:49,347 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 319 transitions. [2022-02-21 00:01:49,347 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:49,349 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 319 transitions. [2022-02-21 00:01:49,349 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 319 transitions. [2022-02-21 00:01:49,584 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 319 edges. 319 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:49,593 INFO L225 Difference]: With dead ends: 422 [2022-02-21 00:01:49,593 INFO L226 Difference]: Without dead ends: 422 [2022-02-21 00:01:49,595 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-02-21 00:01:49,596 INFO L933 BasicCegarLoop]: 303 mSDtfsCounter, 74 mSDsluCounter, 1272 mSDsCounter, 0 mSdLazyCounter, 233 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 1575 SdHoareTripleChecker+Invalid, 256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 233 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:49,596 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 1575 Invalid, 256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 233 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:49,597 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2022-02-21 00:01:49,603 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 410. [2022-02-21 00:01:49,603 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:49,604 INFO L82 GeneralOperation]: Start isEquivalent. First operand 422 states. Second operand has 410 states, 359 states have (on average 1.3008356545961002) internal successors, (467), 366 states have internal predecessors, (467), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:49,604 INFO L74 IsIncluded]: Start isIncluded. First operand 422 states. Second operand has 410 states, 359 states have (on average 1.3008356545961002) internal successors, (467), 366 states have internal predecessors, (467), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:49,605 INFO L87 Difference]: Start difference. First operand 422 states. Second operand has 410 states, 359 states have (on average 1.3008356545961002) internal successors, (467), 366 states have internal predecessors, (467), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:49,615 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:49,615 INFO L93 Difference]: Finished difference Result 422 states and 554 transitions. [2022-02-21 00:01:49,615 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 554 transitions. [2022-02-21 00:01:49,616 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:49,616 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:49,617 INFO L74 IsIncluded]: Start isIncluded. First operand has 410 states, 359 states have (on average 1.3008356545961002) internal successors, (467), 366 states have internal predecessors, (467), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) Second operand 422 states. [2022-02-21 00:01:49,618 INFO L87 Difference]: Start difference. First operand has 410 states, 359 states have (on average 1.3008356545961002) internal successors, (467), 366 states have internal predecessors, (467), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) Second operand 422 states. [2022-02-21 00:01:49,627 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:49,627 INFO L93 Difference]: Finished difference Result 422 states and 554 transitions. [2022-02-21 00:01:49,628 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 554 transitions. [2022-02-21 00:01:49,640 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:49,640 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:49,641 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:49,641 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:49,642 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 410 states, 359 states have (on average 1.3008356545961002) internal successors, (467), 366 states have internal predecessors, (467), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:49,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 540 transitions. [2022-02-21 00:01:49,651 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 540 transitions. Word has length 41 [2022-02-21 00:01:49,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:49,651 INFO L470 AbstractCegarLoop]: Abstraction has 410 states and 540 transitions. [2022-02-21 00:01:49,651 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 5 states have internal predecessors, (37), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:49,652 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 540 transitions. [2022-02-21 00:01:49,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 41 [2022-02-21 00:01:49,653 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:49,653 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:49,653 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable14 [2022-02-21 00:01:49,653 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:49,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:49,654 INFO L85 PathProgramCache]: Analyzing trace with hash 738484898, now seen corresponding path program 1 times [2022-02-21 00:01:49,654 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:49,655 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [99192963] [2022-02-21 00:01:49,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:49,655 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:49,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:49,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-21 00:01:49,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:49,733 INFO L290 TraceCheckUtils]: 0: Hoare triple {32345#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,734 INFO L290 TraceCheckUtils]: 1: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,734 INFO L290 TraceCheckUtils]: 2: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,735 INFO L290 TraceCheckUtils]: 3: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_7~0#1; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,735 INFO L290 TraceCheckUtils]: 4: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} ~returnVal2~0#1 := 0; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,736 INFO L290 TraceCheckUtils]: 5: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {32347#(= ~NP~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,736 INFO L290 TraceCheckUtils]: 6: Hoare triple {32347#(= ~NP~0 |old(~s~0)|)} #res#1 := ~returnVal2~0#1; {32347#(= ~NP~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,736 INFO L290 TraceCheckUtils]: 7: Hoare triple {32347#(= ~NP~0 |old(~s~0)|)} assume true; {32347#(= ~NP~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,737 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {32347#(= ~NP~0 |old(~s~0)|)} {32335#(not (= ~s~0 ~NP~0))} #767#return; {32333#false} is VALID [2022-02-21 00:01:49,737 INFO L290 TraceCheckUtils]: 0: Hoare triple {32332#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {32332#true} is VALID [2022-02-21 00:01:49,738 INFO L290 TraceCheckUtils]: 1: Hoare triple {32332#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,739 INFO L290 TraceCheckUtils]: 2: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume { :end_inline__BLAST_init } true; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,739 INFO L290 TraceCheckUtils]: 3: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,739 INFO L290 TraceCheckUtils]: 4: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,740 INFO L290 TraceCheckUtils]: 5: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,740 INFO L290 TraceCheckUtils]: 6: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume { :end_inline_stub_driver_init } true; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,740 INFO L290 TraceCheckUtils]: 7: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,741 INFO L290 TraceCheckUtils]: 8: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume 3 == main_~tmp_ndt_1~0#1; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,741 INFO L290 TraceCheckUtils]: 9: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,742 INFO L290 TraceCheckUtils]: 10: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume 1 == ~PagingReferenceCount~0; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,742 INFO L290 TraceCheckUtils]: 11: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,742 INFO L290 TraceCheckUtils]: 12: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,743 INFO L290 TraceCheckUtils]: 13: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,743 INFO L290 TraceCheckUtils]: 14: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,743 INFO L290 TraceCheckUtils]: 15: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,744 INFO L290 TraceCheckUtils]: 16: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1; {32334#(not (= ~SKIP1~0 ~NP~0))} is VALID [2022-02-21 00:01:49,744 INFO L290 TraceCheckUtils]: 17: Hoare triple {32334#(not (= ~SKIP1~0 ~NP~0))} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {32335#(not (= ~s~0 ~NP~0))} is VALID [2022-02-21 00:01:49,744 INFO L290 TraceCheckUtils]: 18: Hoare triple {32335#(not (= ~s~0 ~NP~0))} FloppyPnp_#t~post32#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post32#1;havoc FloppyPnp_#t~post32#1;FloppyPnp_#t~post33#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post33#1;havoc FloppyPnp_#t~post33#1; {32335#(not (= ~s~0 ~NP~0))} is VALID [2022-02-21 00:01:49,745 INFO L272 TraceCheckUtils]: 19: Hoare triple {32335#(not (= ~s~0 ~NP~0))} call FloppyPnp_#t~ret34#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {32345#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:49,745 INFO L290 TraceCheckUtils]: 20: Hoare triple {32345#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,746 INFO L290 TraceCheckUtils]: 21: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} assume !(0 != ~compRegistered~0); {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,746 INFO L290 TraceCheckUtils]: 22: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,746 INFO L290 TraceCheckUtils]: 23: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} assume 0 == ~tmp_ndt_7~0#1; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,747 INFO L290 TraceCheckUtils]: 24: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} ~returnVal2~0#1 := 0; {32346#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,747 INFO L290 TraceCheckUtils]: 25: Hoare triple {32346#(= ~s~0 |old(~s~0)|)} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {32347#(= ~NP~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,748 INFO L290 TraceCheckUtils]: 26: Hoare triple {32347#(= ~NP~0 |old(~s~0)|)} #res#1 := ~returnVal2~0#1; {32347#(= ~NP~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,748 INFO L290 TraceCheckUtils]: 27: Hoare triple {32347#(= ~NP~0 |old(~s~0)|)} assume true; {32347#(= ~NP~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:49,749 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {32347#(= ~NP~0 |old(~s~0)|)} {32335#(not (= ~s~0 ~NP~0))} #767#return; {32333#false} is VALID [2022-02-21 00:01:49,749 INFO L290 TraceCheckUtils]: 29: Hoare triple {32333#false} assume -2147483648 <= FloppyPnp_#t~ret34#1 && FloppyPnp_#t~ret34#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret34#1;havoc FloppyPnp_#t~ret34#1;FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {32333#false} is VALID [2022-02-21 00:01:49,749 INFO L290 TraceCheckUtils]: 30: Hoare triple {32333#false} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {32333#false} is VALID [2022-02-21 00:01:49,749 INFO L290 TraceCheckUtils]: 31: Hoare triple {32333#false} assume !(1 == ~pended~0); {32333#false} is VALID [2022-02-21 00:01:49,749 INFO L290 TraceCheckUtils]: 32: Hoare triple {32333#false} assume !(1 == ~pended~0); {32333#false} is VALID [2022-02-21 00:01:49,749 INFO L290 TraceCheckUtils]: 33: Hoare triple {32333#false} assume ~s~0 != ~UNLOADED~0; {32333#false} is VALID [2022-02-21 00:01:49,750 INFO L290 TraceCheckUtils]: 34: Hoare triple {32333#false} assume -1 != main_~status~1#1; {32333#false} is VALID [2022-02-21 00:01:49,750 INFO L290 TraceCheckUtils]: 35: Hoare triple {32333#false} assume ~s~0 != ~SKIP2~0; {32333#false} is VALID [2022-02-21 00:01:49,750 INFO L290 TraceCheckUtils]: 36: Hoare triple {32333#false} assume ~s~0 != ~IPC~0; {32333#false} is VALID [2022-02-21 00:01:49,750 INFO L290 TraceCheckUtils]: 37: Hoare triple {32333#false} assume ~s~0 != ~DC~0; {32333#false} is VALID [2022-02-21 00:01:49,750 INFO L272 TraceCheckUtils]: 38: Hoare triple {32333#false} call errorFn(); {32333#false} is VALID [2022-02-21 00:01:49,750 INFO L290 TraceCheckUtils]: 39: Hoare triple {32333#false} assume !false; {32333#false} is VALID [2022-02-21 00:01:49,751 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:49,751 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:49,751 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [99192963] [2022-02-21 00:01:49,753 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [99192963] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:49,753 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:49,753 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-21 00:01:49,753 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [29207369] [2022-02-21 00:01:49,754 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:49,754 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40 [2022-02-21 00:01:49,754 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:49,754 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:49,781 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 40 edges. 40 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:49,781 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-21 00:01:49,781 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:49,782 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-21 00:01:49,782 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2022-02-21 00:01:49,782 INFO L87 Difference]: Start difference. First operand 410 states and 540 transitions. Second operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:50,869 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:50,870 INFO L93 Difference]: Finished difference Result 447 states and 582 transitions. [2022-02-21 00:01:50,870 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-02-21 00:01:50,870 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 40 [2022-02-21 00:01:50,871 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:50,871 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:50,875 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 344 transitions. [2022-02-21 00:01:50,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:50,880 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11 states to 11 states and 344 transitions. [2022-02-21 00:01:50,880 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 11 states and 344 transitions. [2022-02-21 00:01:51,158 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 344 edges. 344 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:51,168 INFO L225 Difference]: With dead ends: 447 [2022-02-21 00:01:51,168 INFO L226 Difference]: Without dead ends: 447 [2022-02-21 00:01:51,169 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 2 SyntacticMatches, 0 SemanticMatches, 13 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 22 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=61, Invalid=149, Unknown=0, NotChecked=0, Total=210 [2022-02-21 00:01:51,170 INFO L933 BasicCegarLoop]: 296 mSDtfsCounter, 387 mSDsluCounter, 629 mSDsCounter, 0 mSdLazyCounter, 303 mSolverCounterSat, 89 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 395 SdHoareTripleChecker+Valid, 925 SdHoareTripleChecker+Invalid, 392 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 89 IncrementalHoareTripleChecker+Valid, 303 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:51,170 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [395 Valid, 925 Invalid, 392 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [89 Valid, 303 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:01:51,172 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 447 states. [2022-02-21 00:01:51,179 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 447 to 410. [2022-02-21 00:01:51,180 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:51,181 INFO L82 GeneralOperation]: Start isEquivalent. First operand 447 states. Second operand has 410 states, 359 states have (on average 1.2952646239554317) internal successors, (465), 366 states have internal predecessors, (465), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:51,181 INFO L74 IsIncluded]: Start isIncluded. First operand 447 states. Second operand has 410 states, 359 states have (on average 1.2952646239554317) internal successors, (465), 366 states have internal predecessors, (465), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:51,182 INFO L87 Difference]: Start difference. First operand 447 states. Second operand has 410 states, 359 states have (on average 1.2952646239554317) internal successors, (465), 366 states have internal predecessors, (465), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:51,195 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:51,196 INFO L93 Difference]: Finished difference Result 447 states and 582 transitions. [2022-02-21 00:01:51,196 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 582 transitions. [2022-02-21 00:01:51,197 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:51,198 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:51,198 INFO L74 IsIncluded]: Start isIncluded. First operand has 410 states, 359 states have (on average 1.2952646239554317) internal successors, (465), 366 states have internal predecessors, (465), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) Second operand 447 states. [2022-02-21 00:01:51,199 INFO L87 Difference]: Start difference. First operand has 410 states, 359 states have (on average 1.2952646239554317) internal successors, (465), 366 states have internal predecessors, (465), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) Second operand 447 states. [2022-02-21 00:01:51,220 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:51,220 INFO L93 Difference]: Finished difference Result 447 states and 582 transitions. [2022-02-21 00:01:51,220 INFO L276 IsEmpty]: Start isEmpty. Operand 447 states and 582 transitions. [2022-02-21 00:01:51,222 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:51,222 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:51,222 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:51,222 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:51,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 410 states, 359 states have (on average 1.2952646239554317) internal successors, (465), 366 states have internal predecessors, (465), 34 states have call successors, (34), 16 states have call predecessors, (34), 16 states have return successors, (39), 28 states have call predecessors, (39), 28 states have call successors, (39) [2022-02-21 00:01:51,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 410 states to 410 states and 538 transitions. [2022-02-21 00:01:51,236 INFO L78 Accepts]: Start accepts. Automaton has 410 states and 538 transitions. Word has length 40 [2022-02-21 00:01:51,236 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:51,236 INFO L470 AbstractCegarLoop]: Abstraction has 410 states and 538 transitions. [2022-02-21 00:01:51,236 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 5.285714285714286) internal successors, (37), 6 states have internal predecessors, (37), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:51,236 INFO L276 IsEmpty]: Start isEmpty. Operand 410 states and 538 transitions. [2022-02-21 00:01:51,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 42 [2022-02-21 00:01:51,237 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:51,238 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:51,238 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15 [2022-02-21 00:01:51,238 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:51,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:51,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1982956471, now seen corresponding path program 1 times [2022-02-21 00:01:51,239 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:51,239 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1205091954] [2022-02-21 00:01:51,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:51,239 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:51,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:51,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-21 00:01:51,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:51,305 INFO L290 TraceCheckUtils]: 0: Hoare triple {34126#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34117#true} is VALID [2022-02-21 00:01:51,305 INFO L290 TraceCheckUtils]: 1: Hoare triple {34117#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {34117#true} is VALID [2022-02-21 00:01:51,305 INFO L290 TraceCheckUtils]: 2: Hoare triple {34117#true} assume true; {34117#true} is VALID [2022-02-21 00:01:51,306 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {34117#true} {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} #777#return; {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,306 INFO L290 TraceCheckUtils]: 0: Hoare triple {34117#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {34117#true} is VALID [2022-02-21 00:01:51,306 INFO L290 TraceCheckUtils]: 1: Hoare triple {34117#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34117#true} is VALID [2022-02-21 00:01:51,306 INFO L290 TraceCheckUtils]: 2: Hoare triple {34117#true} assume { :end_inline__BLAST_init } true; {34117#true} is VALID [2022-02-21 00:01:51,307 INFO L290 TraceCheckUtils]: 3: Hoare triple {34117#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {34117#true} is VALID [2022-02-21 00:01:51,307 INFO L290 TraceCheckUtils]: 4: Hoare triple {34117#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {34117#true} is VALID [2022-02-21 00:01:51,307 INFO L290 TraceCheckUtils]: 5: Hoare triple {34117#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {34117#true} is VALID [2022-02-21 00:01:51,307 INFO L290 TraceCheckUtils]: 6: Hoare triple {34117#true} assume { :end_inline_stub_driver_init } true; {34117#true} is VALID [2022-02-21 00:01:51,307 INFO L290 TraceCheckUtils]: 7: Hoare triple {34117#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {34117#true} is VALID [2022-02-21 00:01:51,307 INFO L290 TraceCheckUtils]: 8: Hoare triple {34117#true} assume 3 == main_~tmp_ndt_1~0#1; {34117#true} is VALID [2022-02-21 00:01:51,307 INFO L290 TraceCheckUtils]: 9: Hoare triple {34117#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {34117#true} is VALID [2022-02-21 00:01:51,308 INFO L290 TraceCheckUtils]: 10: Hoare triple {34117#true} assume 1 == ~PagingReferenceCount~0; {34117#true} is VALID [2022-02-21 00:01:51,308 INFO L290 TraceCheckUtils]: 11: Hoare triple {34117#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {34117#true} is VALID [2022-02-21 00:01:51,308 INFO L290 TraceCheckUtils]: 12: Hoare triple {34117#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {34117#true} is VALID [2022-02-21 00:01:51,308 INFO L290 TraceCheckUtils]: 13: Hoare triple {34117#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {34117#true} is VALID [2022-02-21 00:01:51,308 INFO L290 TraceCheckUtils]: 14: Hoare triple {34117#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {34117#true} is VALID [2022-02-21 00:01:51,308 INFO L290 TraceCheckUtils]: 15: Hoare triple {34117#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {34117#true} is VALID [2022-02-21 00:01:51,309 INFO L290 TraceCheckUtils]: 16: Hoare triple {34117#true} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 1;assume { :begin_inline_FlQueueIrpToThread } true;FlQueueIrpToThread_#in~Irp#1, FlQueueIrpToThread_#in~DisketteExtension#1 := FloppyPnp_~Irp#1, FloppyPnp_~disketteExtension~0#1;havoc FlQueueIrpToThread_#res#1;havoc FlQueueIrpToThread_#t~nondet4#1, FlQueueIrpToThread_#t~nondet5#1, FlQueueIrpToThread_#t~nondet6#1, FlQueueIrpToThread_#t~nondet7#1, FlQueueIrpToThread_#t~nondet8#1, FlQueueIrpToThread_#t~post9#1, FlQueueIrpToThread_#t~post10#1, FlQueueIrpToThread_#t~post11#1, FlQueueIrpToThread_#t~ret12#1, FlQueueIrpToThread_#t~post13#1, FlQueueIrpToThread_#t~ret14#1, FlQueueIrpToThread_#t~ret15#1, FlQueueIrpToThread_~Irp#1, FlQueueIrpToThread_~DisketteExtension#1, FlQueueIrpToThread_~status~0#1, FlQueueIrpToThread_~threadHandle~0#1, FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1, FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1, FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1, FlQueueIrpToThread_~Irp__IoStatus__Status~0#1, FlQueueIrpToThread_~Irp__IoStatus__Information~0#1, FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1, FlQueueIrpToThread_~ObjAttributes~0#1, FlQueueIrpToThread_~__cil_tmp12~0#1, FlQueueIrpToThread_~__cil_tmp13~0#1;FlQueueIrpToThread_~Irp#1 := FlQueueIrpToThread_#in~Irp#1;FlQueueIrpToThread_~DisketteExtension#1 := FlQueueIrpToThread_#in~DisketteExtension#1;havoc FlQueueIrpToThread_~status~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet4#1 && FlQueueIrpToThread_#t~nondet4#1 <= 2147483647;FlQueueIrpToThread_~threadHandle~0#1 := FlQueueIrpToThread_#t~nondet4#1;havoc FlQueueIrpToThread_#t~nondet4#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet5#1 && FlQueueIrpToThread_#t~nondet5#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1 := FlQueueIrpToThread_#t~nondet5#1;havoc FlQueueIrpToThread_#t~nondet5#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet6#1 && FlQueueIrpToThread_#t~nondet6#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1 := FlQueueIrpToThread_#t~nondet6#1;havoc FlQueueIrpToThread_#t~nondet6#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet7#1 && FlQueueIrpToThread_#t~nondet7#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1 := FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Status~0#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Information~0#1;havoc FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet8#1 && FlQueueIrpToThread_#t~nondet8#1 <= 2147483647;FlQueueIrpToThread_~ObjAttributes~0#1 := FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_~__cil_tmp12~0#1;havoc FlQueueIrpToThread_~__cil_tmp13~0#1; {34117#true} is VALID [2022-02-21 00:01:51,309 INFO L290 TraceCheckUtils]: 17: Hoare triple {34117#true} assume 1 == FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1;~myStatus~0 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Status~0#1 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Information~0#1 := 0;FlQueueIrpToThread_#res#1 := -1073741101; {34117#true} is VALID [2022-02-21 00:01:51,309 INFO L290 TraceCheckUtils]: 18: Hoare triple {34117#true} FloppyPnp_#t~ret35#1 := FlQueueIrpToThread_#res#1;assume { :end_inline_FlQueueIrpToThread } true;assume -2147483648 <= FloppyPnp_#t~ret35#1 && FloppyPnp_#t~ret35#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret35#1;havoc FloppyPnp_#t~ret35#1;FloppyPnp_~__cil_tmp29~0#1 := FloppyPnp_~ntStatus~0#1; {34117#true} is VALID [2022-02-21 00:01:51,309 INFO L290 TraceCheckUtils]: 19: Hoare triple {34117#true} assume !(259 == FloppyPnp_~__cil_tmp29~0#1);FloppyPnp_~ntStatus~0#1 := -1073741823;FloppyPnp_~Irp__IoStatus__Status~1#1 := FloppyPnp_~ntStatus~0#1;~myStatus~0 := FloppyPnp_~ntStatus~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0; {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,311 INFO L272 TraceCheckUtils]: 20: Hoare triple {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {34126#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:01:51,311 INFO L290 TraceCheckUtils]: 21: Hoare triple {34126#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {34117#true} is VALID [2022-02-21 00:01:51,311 INFO L290 TraceCheckUtils]: 22: Hoare triple {34117#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {34117#true} is VALID [2022-02-21 00:01:51,311 INFO L290 TraceCheckUtils]: 23: Hoare triple {34117#true} assume true; {34117#true} is VALID [2022-02-21 00:01:51,312 INFO L284 TraceCheckUtils]: 24: Hoare quadruple {34117#true} {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} #777#return; {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,317 INFO L290 TraceCheckUtils]: 25: Hoare triple {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,318 INFO L290 TraceCheckUtils]: 26: Hoare triple {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} assume 0 == ~PagingReferenceCount~0; {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,318 INFO L290 TraceCheckUtils]: 27: Hoare triple {34119#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {34124#(<= (+ 1073741823 |ULTIMATE.start_FloppyPnp_#res#1|) 0)} is VALID [2022-02-21 00:01:51,319 INFO L290 TraceCheckUtils]: 28: Hoare triple {34124#(<= (+ 1073741823 |ULTIMATE.start_FloppyPnp_#res#1|) 0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,319 INFO L290 TraceCheckUtils]: 29: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(1 == ~pended~0); {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,319 INFO L290 TraceCheckUtils]: 30: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(1 == ~pended~0); {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,320 INFO L290 TraceCheckUtils]: 31: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 != ~UNLOADED~0; {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,320 INFO L290 TraceCheckUtils]: 32: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume -1 != main_~status~1#1; {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,320 INFO L290 TraceCheckUtils]: 33: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 != ~SKIP2~0; {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,321 INFO L290 TraceCheckUtils]: 34: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 != ~IPC~0; {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,321 INFO L290 TraceCheckUtils]: 35: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(~s~0 != ~DC~0); {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,321 INFO L290 TraceCheckUtils]: 36: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(1 == ~pended~0); {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,322 INFO L290 TraceCheckUtils]: 37: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 == ~DC~0; {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:01:51,322 INFO L290 TraceCheckUtils]: 38: Hoare triple {34125#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume 259 == main_~status~1#1; {34118#false} is VALID [2022-02-21 00:01:51,322 INFO L272 TraceCheckUtils]: 39: Hoare triple {34118#false} call errorFn(); {34118#false} is VALID [2022-02-21 00:01:51,322 INFO L290 TraceCheckUtils]: 40: Hoare triple {34118#false} assume !false; {34118#false} is VALID [2022-02-21 00:01:51,323 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:51,323 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:51,323 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1205091954] [2022-02-21 00:01:51,323 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1205091954] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:51,323 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:51,323 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-21 00:01:51,324 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2110914954] [2022-02-21 00:01:51,324 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:51,325 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 41 [2022-02-21 00:01:51,325 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:51,325 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:51,351 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 41 edges. 41 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:51,352 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-21 00:01:51,352 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:51,352 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-21 00:01:51,352 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-21 00:01:51,353 INFO L87 Difference]: Start difference. First operand 410 states and 538 transitions. Second operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:52,081 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:52,082 INFO L93 Difference]: Finished difference Result 436 states and 566 transitions. [2022-02-21 00:01:52,082 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-02-21 00:01:52,082 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 41 [2022-02-21 00:01:52,083 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:52,083 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:52,086 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 334 transitions. [2022-02-21 00:01:52,086 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:52,088 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 6 states to 6 states and 334 transitions. [2022-02-21 00:01:52,088 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 6 states and 334 transitions. [2022-02-21 00:01:52,351 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 334 edges. 334 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:52,360 INFO L225 Difference]: With dead ends: 436 [2022-02-21 00:01:52,360 INFO L226 Difference]: Without dead ends: 404 [2022-02-21 00:01:52,361 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=37, Unknown=0, NotChecked=0, Total=56 [2022-02-21 00:01:52,361 INFO L933 BasicCegarLoop]: 288 mSDtfsCounter, 74 mSDsluCounter, 1026 mSDsCounter, 0 mSdLazyCounter, 145 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 74 SdHoareTripleChecker+Valid, 1314 SdHoareTripleChecker+Invalid, 168 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 145 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:52,362 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [74 Valid, 1314 Invalid, 168 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 145 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-21 00:01:52,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 404 states. [2022-02-21 00:01:52,368 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 404 to 392. [2022-02-21 00:01:52,368 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:52,369 INFO L82 GeneralOperation]: Start isEquivalent. First operand 404 states. Second operand has 392 states, 345 states have (on average 1.2927536231884058) internal successors, (446), 351 states have internal predecessors, (446), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:52,370 INFO L74 IsIncluded]: Start isIncluded. First operand 404 states. Second operand has 392 states, 345 states have (on average 1.2927536231884058) internal successors, (446), 351 states have internal predecessors, (446), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:52,370 INFO L87 Difference]: Start difference. First operand 404 states. Second operand has 392 states, 345 states have (on average 1.2927536231884058) internal successors, (446), 351 states have internal predecessors, (446), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:52,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:52,381 INFO L93 Difference]: Finished difference Result 404 states and 529 transitions. [2022-02-21 00:01:52,381 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 529 transitions. [2022-02-21 00:01:52,382 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:52,382 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:52,383 INFO L74 IsIncluded]: Start isIncluded. First operand has 392 states, 345 states have (on average 1.2927536231884058) internal successors, (446), 351 states have internal predecessors, (446), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) Second operand 404 states. [2022-02-21 00:01:52,383 INFO L87 Difference]: Start difference. First operand has 392 states, 345 states have (on average 1.2927536231884058) internal successors, (446), 351 states have internal predecessors, (446), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) Second operand 404 states. [2022-02-21 00:01:52,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:52,394 INFO L93 Difference]: Finished difference Result 404 states and 529 transitions. [2022-02-21 00:01:52,394 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 529 transitions. [2022-02-21 00:01:52,395 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:52,395 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:52,395 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:52,396 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:52,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 392 states, 345 states have (on average 1.2927536231884058) internal successors, (446), 351 states have internal predecessors, (446), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:52,406 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 392 states to 392 states and 515 transitions. [2022-02-21 00:01:52,406 INFO L78 Accepts]: Start accepts. Automaton has 392 states and 515 transitions. Word has length 41 [2022-02-21 00:01:52,407 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:52,407 INFO L470 AbstractCegarLoop]: Abstraction has 392 states and 515 transitions. [2022-02-21 00:01:52,407 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.333333333333333) internal successors, (38), 5 states have internal predecessors, (38), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:52,407 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 515 transitions. [2022-02-21 00:01:52,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-02-21 00:01:52,408 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:52,408 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:52,408 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2022-02-21 00:01:52,409 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:52,409 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:52,409 INFO L85 PathProgramCache]: Analyzing trace with hash -13657420, now seen corresponding path program 1 times [2022-02-21 00:01:52,409 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:52,410 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825268717] [2022-02-21 00:01:52,410 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:52,410 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:52,446 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:52,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-21 00:01:52,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:52,518 INFO L290 TraceCheckUtils]: 0: Hoare triple {35786#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {35769#true} is VALID [2022-02-21 00:01:52,518 INFO L290 TraceCheckUtils]: 1: Hoare triple {35769#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {35769#true} is VALID [2022-02-21 00:01:52,518 INFO L290 TraceCheckUtils]: 2: Hoare triple {35769#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {35769#true} is VALID [2022-02-21 00:01:52,518 INFO L290 TraceCheckUtils]: 3: Hoare triple {35769#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {35769#true} is VALID [2022-02-21 00:01:52,518 INFO L290 TraceCheckUtils]: 4: Hoare triple {35769#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {35769#true} is VALID [2022-02-21 00:01:52,519 INFO L290 TraceCheckUtils]: 5: Hoare triple {35769#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,519 INFO L290 TraceCheckUtils]: 6: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume { :end_inline_stubMoreProcessingRequired } true; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,520 INFO L290 TraceCheckUtils]: 7: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,520 INFO L290 TraceCheckUtils]: 8: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~tmp_ndt_7~0#1; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,521 INFO L290 TraceCheckUtils]: 9: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0#1 := 0; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,521 INFO L290 TraceCheckUtils]: 10: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-02-21 00:01:52,521 INFO L290 TraceCheckUtils]: 11: Hoare triple {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res#1 := ~returnVal2~0#1; {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-02-21 00:01:52,522 INFO L290 TraceCheckUtils]: 12: Hoare triple {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-02-21 00:01:52,523 INFO L284 TraceCheckUtils]: 13: Hoare quadruple {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #753#return; {35770#false} is VALID [2022-02-21 00:01:52,523 INFO L290 TraceCheckUtils]: 0: Hoare triple {35769#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {35769#true} is VALID [2022-02-21 00:01:52,524 INFO L290 TraceCheckUtils]: 1: Hoare triple {35769#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,524 INFO L290 TraceCheckUtils]: 2: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume { :end_inline__BLAST_init } true; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,525 INFO L290 TraceCheckUtils]: 3: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,525 INFO L290 TraceCheckUtils]: 4: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,526 INFO L290 TraceCheckUtils]: 5: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,526 INFO L290 TraceCheckUtils]: 6: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume { :end_inline_stub_driver_init } true; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,526 INFO L290 TraceCheckUtils]: 7: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,527 INFO L290 TraceCheckUtils]: 8: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 3 == main_~tmp_ndt_1~0#1; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,528 INFO L290 TraceCheckUtils]: 9: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,528 INFO L290 TraceCheckUtils]: 10: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 1 == ~PagingReferenceCount~0; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,529 INFO L290 TraceCheckUtils]: 11: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,529 INFO L290 TraceCheckUtils]: 12: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,530 INFO L290 TraceCheckUtils]: 13: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,531 INFO L290 TraceCheckUtils]: 14: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,531 INFO L290 TraceCheckUtils]: 15: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(~s~0 != ~NP~0); {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,532 INFO L290 TraceCheckUtils]: 16: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,532 INFO L290 TraceCheckUtils]: 17: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} is VALID [2022-02-21 00:01:52,533 INFO L272 TraceCheckUtils]: 18: Hoare triple {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {35786#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:52,533 INFO L290 TraceCheckUtils]: 19: Hoare triple {35786#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {35769#true} is VALID [2022-02-21 00:01:52,533 INFO L290 TraceCheckUtils]: 20: Hoare triple {35769#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {35769#true} is VALID [2022-02-21 00:01:52,533 INFO L290 TraceCheckUtils]: 21: Hoare triple {35769#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {35769#true} is VALID [2022-02-21 00:01:52,534 INFO L290 TraceCheckUtils]: 22: Hoare triple {35769#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {35769#true} is VALID [2022-02-21 00:01:52,534 INFO L290 TraceCheckUtils]: 23: Hoare triple {35769#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {35769#true} is VALID [2022-02-21 00:01:52,534 INFO L290 TraceCheckUtils]: 24: Hoare triple {35769#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,535 INFO L290 TraceCheckUtils]: 25: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume { :end_inline_stubMoreProcessingRequired } true; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,535 INFO L290 TraceCheckUtils]: 26: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,535 INFO L290 TraceCheckUtils]: 27: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume 0 == ~tmp_ndt_7~0#1; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,536 INFO L290 TraceCheckUtils]: 28: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} ~returnVal2~0#1 := 0; {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} is VALID [2022-02-21 00:01:52,536 INFO L290 TraceCheckUtils]: 29: Hoare triple {35787#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~s~0))} assume ~s~0 == ~NP~0;~s~0 := ~IPC~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-02-21 00:01:52,537 INFO L290 TraceCheckUtils]: 30: Hoare triple {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} #res#1 := ~returnVal2~0#1; {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-02-21 00:01:52,537 INFO L290 TraceCheckUtils]: 31: Hoare triple {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} assume true; {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} is VALID [2022-02-21 00:01:52,538 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {35788#(or (= (+ (- 1) ~MPR1~0) 0) (= ~MPR1~0 ~NP~0))} {35771#(and (<= 5 ~MPR1~0) (= ~NP~0 1))} #753#return; {35770#false} is VALID [2022-02-21 00:01:52,538 INFO L290 TraceCheckUtils]: 33: Hoare triple {35770#false} assume -2147483648 <= FloppyStartDevice_#t~ret74#1 && FloppyStartDevice_#t~ret74#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret74#1;havoc FloppyStartDevice_#t~ret74#1;FloppyStartDevice_~__cil_tmp42~0#1 := FloppyStartDevice_~ntStatus~1#1; {35770#false} is VALID [2022-02-21 00:01:52,538 INFO L290 TraceCheckUtils]: 34: Hoare triple {35770#false} assume 259 == FloppyStartDevice_~__cil_tmp42~0#1; {35770#false} is VALID [2022-02-21 00:01:52,538 INFO L272 TraceCheckUtils]: 35: Hoare triple {35770#false} call FloppyStartDevice_#t~ret75#1 := KeWaitForSingleObject(FloppyStartDevice_~doneEvent~1#1, ~Executive~0, ~KernelMode~0, 0, 0); {35770#false} is VALID [2022-02-21 00:01:52,538 INFO L290 TraceCheckUtils]: 36: Hoare triple {35770#false} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {35770#false} is VALID [2022-02-21 00:01:52,539 INFO L290 TraceCheckUtils]: 37: Hoare triple {35770#false} assume ~s~0 == ~MPR3~0; {35770#false} is VALID [2022-02-21 00:01:52,539 INFO L290 TraceCheckUtils]: 38: Hoare triple {35770#false} assume !(1 == ~setEventCalled~0); {35770#false} is VALID [2022-02-21 00:01:52,539 INFO L290 TraceCheckUtils]: 39: Hoare triple {35770#false} assume !(1 == ~customIrp~0); {35770#false} is VALID [2022-02-21 00:01:52,539 INFO L290 TraceCheckUtils]: 40: Hoare triple {35770#false} assume ~s~0 == ~MPR3~0; {35770#false} is VALID [2022-02-21 00:01:52,539 INFO L272 TraceCheckUtils]: 41: Hoare triple {35770#false} call errorFn(); {35770#false} is VALID [2022-02-21 00:01:52,539 INFO L290 TraceCheckUtils]: 42: Hoare triple {35770#false} assume !false; {35770#false} is VALID [2022-02-21 00:01:52,540 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:52,540 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:52,541 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825268717] [2022-02-21 00:01:52,541 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825268717] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:52,541 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:52,541 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-21 00:01:52,541 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [909261846] [2022-02-21 00:01:52,542 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:52,542 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 43 [2022-02-21 00:01:52,542 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:52,542 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:52,573 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:52,573 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-21 00:01:52,575 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:52,577 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-21 00:01:52,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-21 00:01:52,578 INFO L87 Difference]: Start difference. First operand 392 states and 515 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:53,529 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:53,529 INFO L93 Difference]: Finished difference Result 404 states and 528 transitions. [2022-02-21 00:01:53,529 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-21 00:01:53,530 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 43 [2022-02-21 00:01:53,530 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:53,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:53,532 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 312 transitions. [2022-02-21 00:01:53,532 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:53,535 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 312 transitions. [2022-02-21 00:01:53,535 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 312 transitions. [2022-02-21 00:01:53,767 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 312 edges. 312 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:53,775 INFO L225 Difference]: With dead ends: 404 [2022-02-21 00:01:53,776 INFO L226 Difference]: Without dead ends: 404 [2022-02-21 00:01:53,776 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=28, Invalid=62, Unknown=0, NotChecked=0, Total=90 [2022-02-21 00:01:53,777 INFO L933 BasicCegarLoop]: 280 mSDtfsCounter, 315 mSDsluCounter, 619 mSDsCounter, 0 mSdLazyCounter, 265 mSolverCounterSat, 34 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 317 SdHoareTripleChecker+Valid, 899 SdHoareTripleChecker+Invalid, 299 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 34 IncrementalHoareTripleChecker+Valid, 265 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:53,777 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [317 Valid, 899 Invalid, 299 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [34 Valid, 265 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:53,778 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 404 states. [2022-02-21 00:01:53,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 404 to 392. [2022-02-21 00:01:53,783 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:53,784 INFO L82 GeneralOperation]: Start isEquivalent. First operand 404 states. Second operand has 392 states, 345 states have (on average 1.289855072463768) internal successors, (445), 351 states have internal predecessors, (445), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:53,784 INFO L74 IsIncluded]: Start isIncluded. First operand 404 states. Second operand has 392 states, 345 states have (on average 1.289855072463768) internal successors, (445), 351 states have internal predecessors, (445), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:53,785 INFO L87 Difference]: Start difference. First operand 404 states. Second operand has 392 states, 345 states have (on average 1.289855072463768) internal successors, (445), 351 states have internal predecessors, (445), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:53,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:53,796 INFO L93 Difference]: Finished difference Result 404 states and 528 transitions. [2022-02-21 00:01:53,796 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 528 transitions. [2022-02-21 00:01:53,797 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:53,797 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:53,798 INFO L74 IsIncluded]: Start isIncluded. First operand has 392 states, 345 states have (on average 1.289855072463768) internal successors, (445), 351 states have internal predecessors, (445), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) Second operand 404 states. [2022-02-21 00:01:53,798 INFO L87 Difference]: Start difference. First operand has 392 states, 345 states have (on average 1.289855072463768) internal successors, (445), 351 states have internal predecessors, (445), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) Second operand 404 states. [2022-02-21 00:01:53,808 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:53,809 INFO L93 Difference]: Finished difference Result 404 states and 528 transitions. [2022-02-21 00:01:53,809 INFO L276 IsEmpty]: Start isEmpty. Operand 404 states and 528 transitions. [2022-02-21 00:01:53,810 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:53,810 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:53,810 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:53,810 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:53,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 392 states, 345 states have (on average 1.289855072463768) internal successors, (445), 351 states have internal predecessors, (445), 32 states have call successors, (32), 14 states have call predecessors, (32), 14 states have return successors, (37), 27 states have call predecessors, (37), 26 states have call successors, (37) [2022-02-21 00:01:53,820 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 392 states to 392 states and 514 transitions. [2022-02-21 00:01:53,820 INFO L78 Accepts]: Start accepts. Automaton has 392 states and 514 transitions. Word has length 43 [2022-02-21 00:01:53,821 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:53,821 INFO L470 AbstractCegarLoop]: Abstraction has 392 states and 514 transitions. [2022-02-21 00:01:53,821 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:53,821 INFO L276 IsEmpty]: Start isEmpty. Operand 392 states and 514 transitions. [2022-02-21 00:01:53,822 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-02-21 00:01:53,822 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:53,822 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:53,822 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable17 [2022-02-21 00:01:53,823 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:53,823 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:53,823 INFO L85 PathProgramCache]: Analyzing trace with hash -1480101209, now seen corresponding path program 1 times [2022-02-21 00:01:53,823 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:53,824 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1377021007] [2022-02-21 00:01:53,824 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:53,824 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:53,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:53,905 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-21 00:01:53,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:53,921 INFO L290 TraceCheckUtils]: 0: Hoare triple {37419#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {37404#true} is VALID [2022-02-21 00:01:53,921 INFO L290 TraceCheckUtils]: 1: Hoare triple {37404#true} assume !(0 != ~compRegistered~0); {37404#true} is VALID [2022-02-21 00:01:53,921 INFO L290 TraceCheckUtils]: 2: Hoare triple {37404#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {37404#true} is VALID [2022-02-21 00:01:53,922 INFO L290 TraceCheckUtils]: 3: Hoare triple {37404#true} assume 0 == ~tmp_ndt_7~0#1; {37404#true} is VALID [2022-02-21 00:01:53,922 INFO L290 TraceCheckUtils]: 4: Hoare triple {37404#true} ~returnVal2~0#1 := 0; {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} is VALID [2022-02-21 00:01:53,922 INFO L290 TraceCheckUtils]: 5: Hoare triple {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} assume !(~s~0 == ~NP~0); {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} is VALID [2022-02-21 00:01:53,923 INFO L290 TraceCheckUtils]: 6: Hoare triple {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} assume ~s~0 == ~MPR1~0; {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} is VALID [2022-02-21 00:01:53,923 INFO L290 TraceCheckUtils]: 7: Hoare triple {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {37405#false} is VALID [2022-02-21 00:01:53,923 INFO L290 TraceCheckUtils]: 8: Hoare triple {37405#false} #res#1 := ~returnVal2~0#1; {37405#false} is VALID [2022-02-21 00:01:53,923 INFO L290 TraceCheckUtils]: 9: Hoare triple {37405#false} assume true; {37405#false} is VALID [2022-02-21 00:01:53,924 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {37405#false} {37407#(and (= 3 ~s~0) (not (= ~MPR1~0 3)))} #767#return; {37405#false} is VALID [2022-02-21 00:01:53,924 INFO L290 TraceCheckUtils]: 0: Hoare triple {37404#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {37404#true} is VALID [2022-02-21 00:01:53,925 INFO L290 TraceCheckUtils]: 1: Hoare triple {37404#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,925 INFO L290 TraceCheckUtils]: 2: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume { :end_inline__BLAST_init } true; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,926 INFO L290 TraceCheckUtils]: 3: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,926 INFO L290 TraceCheckUtils]: 4: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,927 INFO L290 TraceCheckUtils]: 5: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,927 INFO L290 TraceCheckUtils]: 6: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume { :end_inline_stub_driver_init } true; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,928 INFO L290 TraceCheckUtils]: 7: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,928 INFO L290 TraceCheckUtils]: 8: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 3 == main_~tmp_ndt_1~0#1; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,929 INFO L290 TraceCheckUtils]: 9: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,930 INFO L290 TraceCheckUtils]: 10: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 1 == ~PagingReferenceCount~0; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,930 INFO L290 TraceCheckUtils]: 11: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,930 INFO L290 TraceCheckUtils]: 12: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,931 INFO L290 TraceCheckUtils]: 13: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,931 INFO L290 TraceCheckUtils]: 14: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,932 INFO L290 TraceCheckUtils]: 15: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,932 INFO L290 TraceCheckUtils]: 16: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1; {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} is VALID [2022-02-21 00:01:53,933 INFO L290 TraceCheckUtils]: 17: Hoare triple {37406#(and (not (= ~MPR1~0 3)) (= ~SKIP1~0 3))} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {37407#(and (= 3 ~s~0) (not (= ~MPR1~0 3)))} is VALID [2022-02-21 00:01:53,933 INFO L290 TraceCheckUtils]: 18: Hoare triple {37407#(and (= 3 ~s~0) (not (= ~MPR1~0 3)))} FloppyPnp_#t~post32#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post32#1;havoc FloppyPnp_#t~post32#1;FloppyPnp_#t~post33#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post33#1;havoc FloppyPnp_#t~post33#1; {37407#(and (= 3 ~s~0) (not (= ~MPR1~0 3)))} is VALID [2022-02-21 00:01:53,934 INFO L272 TraceCheckUtils]: 19: Hoare triple {37407#(and (= 3 ~s~0) (not (= ~MPR1~0 3)))} call FloppyPnp_#t~ret34#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {37419#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:53,934 INFO L290 TraceCheckUtils]: 20: Hoare triple {37419#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {37404#true} is VALID [2022-02-21 00:01:53,934 INFO L290 TraceCheckUtils]: 21: Hoare triple {37404#true} assume !(0 != ~compRegistered~0); {37404#true} is VALID [2022-02-21 00:01:53,934 INFO L290 TraceCheckUtils]: 22: Hoare triple {37404#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {37404#true} is VALID [2022-02-21 00:01:53,935 INFO L290 TraceCheckUtils]: 23: Hoare triple {37404#true} assume 0 == ~tmp_ndt_7~0#1; {37404#true} is VALID [2022-02-21 00:01:53,935 INFO L290 TraceCheckUtils]: 24: Hoare triple {37404#true} ~returnVal2~0#1 := 0; {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} is VALID [2022-02-21 00:01:53,935 INFO L290 TraceCheckUtils]: 25: Hoare triple {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} assume !(~s~0 == ~NP~0); {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} is VALID [2022-02-21 00:01:53,936 INFO L290 TraceCheckUtils]: 26: Hoare triple {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} assume ~s~0 == ~MPR1~0; {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} is VALID [2022-02-21 00:01:53,936 INFO L290 TraceCheckUtils]: 27: Hoare triple {37420#(<= |IofCallDriver_~returnVal2~0#1| 0)} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {37405#false} is VALID [2022-02-21 00:01:53,936 INFO L290 TraceCheckUtils]: 28: Hoare triple {37405#false} #res#1 := ~returnVal2~0#1; {37405#false} is VALID [2022-02-21 00:01:53,936 INFO L290 TraceCheckUtils]: 29: Hoare triple {37405#false} assume true; {37405#false} is VALID [2022-02-21 00:01:53,937 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {37405#false} {37407#(and (= 3 ~s~0) (not (= ~MPR1~0 3)))} #767#return; {37405#false} is VALID [2022-02-21 00:01:53,937 INFO L290 TraceCheckUtils]: 31: Hoare triple {37405#false} assume -2147483648 <= FloppyPnp_#t~ret34#1 && FloppyPnp_#t~ret34#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret34#1;havoc FloppyPnp_#t~ret34#1;FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {37405#false} is VALID [2022-02-21 00:01:53,937 INFO L290 TraceCheckUtils]: 32: Hoare triple {37405#false} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {37405#false} is VALID [2022-02-21 00:01:53,937 INFO L290 TraceCheckUtils]: 33: Hoare triple {37405#false} assume !(1 == ~pended~0); {37405#false} is VALID [2022-02-21 00:01:53,937 INFO L290 TraceCheckUtils]: 34: Hoare triple {37405#false} assume !(1 == ~pended~0); {37405#false} is VALID [2022-02-21 00:01:53,937 INFO L290 TraceCheckUtils]: 35: Hoare triple {37405#false} assume ~s~0 != ~UNLOADED~0; {37405#false} is VALID [2022-02-21 00:01:53,937 INFO L290 TraceCheckUtils]: 36: Hoare triple {37405#false} assume -1 != main_~status~1#1; {37405#false} is VALID [2022-02-21 00:01:53,938 INFO L290 TraceCheckUtils]: 37: Hoare triple {37405#false} assume ~s~0 != ~SKIP2~0; {37405#false} is VALID [2022-02-21 00:01:53,938 INFO L290 TraceCheckUtils]: 38: Hoare triple {37405#false} assume ~s~0 != ~IPC~0; {37405#false} is VALID [2022-02-21 00:01:53,938 INFO L290 TraceCheckUtils]: 39: Hoare triple {37405#false} assume ~s~0 != ~DC~0; {37405#false} is VALID [2022-02-21 00:01:53,938 INFO L272 TraceCheckUtils]: 40: Hoare triple {37405#false} call errorFn(); {37405#false} is VALID [2022-02-21 00:01:53,938 INFO L290 TraceCheckUtils]: 41: Hoare triple {37405#false} assume !false; {37405#false} is VALID [2022-02-21 00:01:53,939 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:53,939 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:53,939 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1377021007] [2022-02-21 00:01:53,939 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1377021007] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:53,939 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:53,939 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-21 00:01:53,939 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [47570977] [2022-02-21 00:01:53,940 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:53,941 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 42 [2022-02-21 00:01:53,941 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:53,941 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:53,970 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:53,970 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-21 00:01:53,970 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:53,971 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-21 00:01:53,971 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-21 00:01:53,971 INFO L87 Difference]: Start difference. First operand 392 states and 514 transitions. Second operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,003 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:55,004 INFO L93 Difference]: Finished difference Result 411 states and 538 transitions. [2022-02-21 00:01:55,004 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-21 00:01:55,004 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 42 [2022-02-21 00:01:55,005 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:55,005 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 329 transitions. [2022-02-21 00:01:55,008 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,010 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 329 transitions. [2022-02-21 00:01:55,011 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 329 transitions. [2022-02-21 00:01:55,284 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 329 edges. 329 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:55,293 INFO L225 Difference]: With dead ends: 411 [2022-02-21 00:01:55,294 INFO L226 Difference]: Without dead ends: 411 [2022-02-21 00:01:55,294 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=72, Unknown=0, NotChecked=0, Total=110 [2022-02-21 00:01:55,294 INFO L933 BasicCegarLoop]: 273 mSDtfsCounter, 334 mSDsluCounter, 629 mSDsCounter, 0 mSdLazyCounter, 227 mSolverCounterSat, 56 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 339 SdHoareTripleChecker+Valid, 902 SdHoareTripleChecker+Invalid, 283 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 56 IncrementalHoareTripleChecker+Valid, 227 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:55,295 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [339 Valid, 902 Invalid, 283 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [56 Valid, 227 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:55,295 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 411 states. [2022-02-21 00:01:55,301 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 411 to 384. [2022-02-21 00:01:55,302 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:55,302 INFO L82 GeneralOperation]: Start isEquivalent. First operand 411 states. Second operand has 384 states, 338 states have (on average 1.2810650887573964) internal successors, (433), 344 states have internal predecessors, (433), 32 states have call successors, (32), 14 states have call predecessors, (32), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:55,303 INFO L74 IsIncluded]: Start isIncluded. First operand 411 states. Second operand has 384 states, 338 states have (on average 1.2810650887573964) internal successors, (433), 344 states have internal predecessors, (433), 32 states have call successors, (32), 14 states have call predecessors, (32), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:55,303 INFO L87 Difference]: Start difference. First operand 411 states. Second operand has 384 states, 338 states have (on average 1.2810650887573964) internal successors, (433), 344 states have internal predecessors, (433), 32 states have call successors, (32), 14 states have call predecessors, (32), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:55,314 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:55,314 INFO L93 Difference]: Finished difference Result 411 states and 538 transitions. [2022-02-21 00:01:55,315 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 538 transitions. [2022-02-21 00:01:55,316 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:55,316 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:55,316 INFO L74 IsIncluded]: Start isIncluded. First operand has 384 states, 338 states have (on average 1.2810650887573964) internal successors, (433), 344 states have internal predecessors, (433), 32 states have call successors, (32), 14 states have call predecessors, (32), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) Second operand 411 states. [2022-02-21 00:01:55,317 INFO L87 Difference]: Start difference. First operand has 384 states, 338 states have (on average 1.2810650887573964) internal successors, (433), 344 states have internal predecessors, (433), 32 states have call successors, (32), 14 states have call predecessors, (32), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) Second operand 411 states. [2022-02-21 00:01:55,328 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:55,328 INFO L93 Difference]: Finished difference Result 411 states and 538 transitions. [2022-02-21 00:01:55,328 INFO L276 IsEmpty]: Start isEmpty. Operand 411 states and 538 transitions. [2022-02-21 00:01:55,329 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:55,329 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:55,330 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:55,330 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:55,332 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 384 states, 338 states have (on average 1.2810650887573964) internal successors, (433), 344 states have internal predecessors, (433), 32 states have call successors, (32), 14 states have call predecessors, (32), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:55,340 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 384 states to 384 states and 501 transitions. [2022-02-21 00:01:55,340 INFO L78 Accepts]: Start accepts. Automaton has 384 states and 501 transitions. Word has length 42 [2022-02-21 00:01:55,340 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:55,341 INFO L470 AbstractCegarLoop]: Abstraction has 384 states and 501 transitions. [2022-02-21 00:01:55,341 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.5) internal successors, (39), 5 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,341 INFO L276 IsEmpty]: Start isEmpty. Operand 384 states and 501 transitions. [2022-02-21 00:01:55,342 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 43 [2022-02-21 00:01:55,342 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:55,342 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:55,342 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18 [2022-02-21 00:01:55,343 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:55,343 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:55,343 INFO L85 PathProgramCache]: Analyzing trace with hash -2093894745, now seen corresponding path program 1 times [2022-02-21 00:01:55,343 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:55,344 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [409055404] [2022-02-21 00:01:55,344 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:55,344 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:55,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:55,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-21 00:01:55,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:55,394 INFO L290 TraceCheckUtils]: 0: Hoare triple {39066#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {39052#true} is VALID [2022-02-21 00:01:55,395 INFO L290 TraceCheckUtils]: 1: Hoare triple {39052#true} assume !(0 != ~compRegistered~0); {39052#true} is VALID [2022-02-21 00:01:55,395 INFO L290 TraceCheckUtils]: 2: Hoare triple {39052#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {39052#true} is VALID [2022-02-21 00:01:55,395 INFO L290 TraceCheckUtils]: 3: Hoare triple {39052#true} assume 0 == ~tmp_ndt_7~0#1; {39052#true} is VALID [2022-02-21 00:01:55,395 INFO L290 TraceCheckUtils]: 4: Hoare triple {39052#true} ~returnVal2~0#1 := 0; {39052#true} is VALID [2022-02-21 00:01:55,395 INFO L290 TraceCheckUtils]: 5: Hoare triple {39052#true} assume !(~s~0 == ~NP~0); {39052#true} is VALID [2022-02-21 00:01:55,395 INFO L290 TraceCheckUtils]: 6: Hoare triple {39052#true} assume !(~s~0 == ~MPR1~0); {39052#true} is VALID [2022-02-21 00:01:55,396 INFO L290 TraceCheckUtils]: 7: Hoare triple {39052#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,396 INFO L290 TraceCheckUtils]: 8: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} #res#1 := ~returnVal2~0#1; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,397 INFO L290 TraceCheckUtils]: 9: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume true; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,397 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} {39052#true} #767#return; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,398 INFO L290 TraceCheckUtils]: 0: Hoare triple {39052#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {39052#true} is VALID [2022-02-21 00:01:55,398 INFO L290 TraceCheckUtils]: 1: Hoare triple {39052#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {39052#true} is VALID [2022-02-21 00:01:55,398 INFO L290 TraceCheckUtils]: 2: Hoare triple {39052#true} assume { :end_inline__BLAST_init } true; {39052#true} is VALID [2022-02-21 00:01:55,398 INFO L290 TraceCheckUtils]: 3: Hoare triple {39052#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {39052#true} is VALID [2022-02-21 00:01:55,398 INFO L290 TraceCheckUtils]: 4: Hoare triple {39052#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {39052#true} is VALID [2022-02-21 00:01:55,399 INFO L290 TraceCheckUtils]: 5: Hoare triple {39052#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {39052#true} is VALID [2022-02-21 00:01:55,399 INFO L290 TraceCheckUtils]: 6: Hoare triple {39052#true} assume { :end_inline_stub_driver_init } true; {39052#true} is VALID [2022-02-21 00:01:55,399 INFO L290 TraceCheckUtils]: 7: Hoare triple {39052#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {39052#true} is VALID [2022-02-21 00:01:55,399 INFO L290 TraceCheckUtils]: 8: Hoare triple {39052#true} assume 3 == main_~tmp_ndt_1~0#1; {39052#true} is VALID [2022-02-21 00:01:55,399 INFO L290 TraceCheckUtils]: 9: Hoare triple {39052#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {39052#true} is VALID [2022-02-21 00:01:55,399 INFO L290 TraceCheckUtils]: 10: Hoare triple {39052#true} assume 1 == ~PagingReferenceCount~0; {39052#true} is VALID [2022-02-21 00:01:55,400 INFO L290 TraceCheckUtils]: 11: Hoare triple {39052#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {39052#true} is VALID [2022-02-21 00:01:55,400 INFO L290 TraceCheckUtils]: 12: Hoare triple {39052#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {39052#true} is VALID [2022-02-21 00:01:55,400 INFO L290 TraceCheckUtils]: 13: Hoare triple {39052#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {39052#true} is VALID [2022-02-21 00:01:55,400 INFO L290 TraceCheckUtils]: 14: Hoare triple {39052#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {39052#true} is VALID [2022-02-21 00:01:55,400 INFO L290 TraceCheckUtils]: 15: Hoare triple {39052#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {39052#true} is VALID [2022-02-21 00:01:55,400 INFO L290 TraceCheckUtils]: 16: Hoare triple {39052#true} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1; {39052#true} is VALID [2022-02-21 00:01:55,400 INFO L290 TraceCheckUtils]: 17: Hoare triple {39052#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {39052#true} is VALID [2022-02-21 00:01:55,401 INFO L290 TraceCheckUtils]: 18: Hoare triple {39052#true} FloppyPnp_#t~post32#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post32#1;havoc FloppyPnp_#t~post32#1;FloppyPnp_#t~post33#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post33#1;havoc FloppyPnp_#t~post33#1; {39052#true} is VALID [2022-02-21 00:01:55,401 INFO L272 TraceCheckUtils]: 19: Hoare triple {39052#true} call FloppyPnp_#t~ret34#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {39066#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:55,402 INFO L290 TraceCheckUtils]: 20: Hoare triple {39066#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {39052#true} is VALID [2022-02-21 00:01:55,402 INFO L290 TraceCheckUtils]: 21: Hoare triple {39052#true} assume !(0 != ~compRegistered~0); {39052#true} is VALID [2022-02-21 00:01:55,402 INFO L290 TraceCheckUtils]: 22: Hoare triple {39052#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {39052#true} is VALID [2022-02-21 00:01:55,402 INFO L290 TraceCheckUtils]: 23: Hoare triple {39052#true} assume 0 == ~tmp_ndt_7~0#1; {39052#true} is VALID [2022-02-21 00:01:55,402 INFO L290 TraceCheckUtils]: 24: Hoare triple {39052#true} ~returnVal2~0#1 := 0; {39052#true} is VALID [2022-02-21 00:01:55,402 INFO L290 TraceCheckUtils]: 25: Hoare triple {39052#true} assume !(~s~0 == ~NP~0); {39052#true} is VALID [2022-02-21 00:01:55,402 INFO L290 TraceCheckUtils]: 26: Hoare triple {39052#true} assume !(~s~0 == ~MPR1~0); {39052#true} is VALID [2022-02-21 00:01:55,403 INFO L290 TraceCheckUtils]: 27: Hoare triple {39052#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,403 INFO L290 TraceCheckUtils]: 28: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} #res#1 := ~returnVal2~0#1; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,404 INFO L290 TraceCheckUtils]: 29: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume true; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,404 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} {39052#true} #767#return; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,405 INFO L290 TraceCheckUtils]: 31: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume -2147483648 <= FloppyPnp_#t~ret34#1 && FloppyPnp_#t~ret34#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret34#1;havoc FloppyPnp_#t~ret34#1;FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,405 INFO L290 TraceCheckUtils]: 32: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,406 INFO L290 TraceCheckUtils]: 33: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume !(1 == ~pended~0); {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,406 INFO L290 TraceCheckUtils]: 34: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume !(1 == ~pended~0); {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,407 INFO L290 TraceCheckUtils]: 35: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume ~s~0 != ~UNLOADED~0; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,407 INFO L290 TraceCheckUtils]: 36: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume -1 != main_~status~1#1; {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} is VALID [2022-02-21 00:01:55,408 INFO L290 TraceCheckUtils]: 37: Hoare triple {39065#(= (+ ~SKIP2~0 (* (- 1) ~s~0)) 0)} assume ~s~0 != ~SKIP2~0; {39053#false} is VALID [2022-02-21 00:01:55,408 INFO L290 TraceCheckUtils]: 38: Hoare triple {39053#false} assume ~s~0 != ~IPC~0; {39053#false} is VALID [2022-02-21 00:01:55,408 INFO L290 TraceCheckUtils]: 39: Hoare triple {39053#false} assume ~s~0 != ~DC~0; {39053#false} is VALID [2022-02-21 00:01:55,408 INFO L272 TraceCheckUtils]: 40: Hoare triple {39053#false} call errorFn(); {39053#false} is VALID [2022-02-21 00:01:55,408 INFO L290 TraceCheckUtils]: 41: Hoare triple {39053#false} assume !false; {39053#false} is VALID [2022-02-21 00:01:55,408 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:55,409 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:55,409 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [409055404] [2022-02-21 00:01:55,409 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [409055404] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:55,409 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:55,409 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-21 00:01:55,409 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2075118345] [2022-02-21 00:01:55,410 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:55,410 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 42 [2022-02-21 00:01:55,410 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:55,410 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 9.75) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,440 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 42 edges. 42 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:55,441 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-21 00:01:55,441 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:55,441 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-21 00:01:55,442 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-21 00:01:55,442 INFO L87 Difference]: Start difference. First operand 384 states and 501 transitions. Second operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,957 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:55,957 INFO L93 Difference]: Finished difference Result 397 states and 512 transitions. [2022-02-21 00:01:55,958 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-21 00:01:55,958 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 42 [2022-02-21 00:01:55,958 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:55,958 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,962 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 328 transitions. [2022-02-21 00:01:55,962 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 9.75) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:55,964 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 328 transitions. [2022-02-21 00:01:55,965 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 328 transitions. [2022-02-21 00:01:56,213 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 328 edges. 328 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:56,221 INFO L225 Difference]: With dead ends: 397 [2022-02-21 00:01:56,221 INFO L226 Difference]: Without dead ends: 397 [2022-02-21 00:01:56,222 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 7 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-21 00:01:56,222 INFO L933 BasicCegarLoop]: 284 mSDtfsCounter, 80 mSDsluCounter, 403 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 23 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 81 SdHoareTripleChecker+Valid, 687 SdHoareTripleChecker+Invalid, 148 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 23 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:56,222 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [81 Valid, 687 Invalid, 148 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [23 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-21 00:01:56,223 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 397 states. [2022-02-21 00:01:56,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 397 to 381. [2022-02-21 00:01:56,228 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:56,229 INFO L82 GeneralOperation]: Start isEquivalent. First operand 397 states. Second operand has 381 states, 336 states have (on average 1.2738095238095237) internal successors, (428), 341 states have internal predecessors, (428), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:56,229 INFO L74 IsIncluded]: Start isIncluded. First operand 397 states. Second operand has 381 states, 336 states have (on average 1.2738095238095237) internal successors, (428), 341 states have internal predecessors, (428), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:56,230 INFO L87 Difference]: Start difference. First operand 397 states. Second operand has 381 states, 336 states have (on average 1.2738095238095237) internal successors, (428), 341 states have internal predecessors, (428), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:56,240 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:56,240 INFO L93 Difference]: Finished difference Result 397 states and 512 transitions. [2022-02-21 00:01:56,241 INFO L276 IsEmpty]: Start isEmpty. Operand 397 states and 512 transitions. [2022-02-21 00:01:56,242 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:56,242 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:56,243 INFO L74 IsIncluded]: Start isIncluded. First operand has 381 states, 336 states have (on average 1.2738095238095237) internal successors, (428), 341 states have internal predecessors, (428), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) Second operand 397 states. [2022-02-21 00:01:56,243 INFO L87 Difference]: Start difference. First operand has 381 states, 336 states have (on average 1.2738095238095237) internal successors, (428), 341 states have internal predecessors, (428), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) Second operand 397 states. [2022-02-21 00:01:56,253 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:56,253 INFO L93 Difference]: Finished difference Result 397 states and 512 transitions. [2022-02-21 00:01:56,253 INFO L276 IsEmpty]: Start isEmpty. Operand 397 states and 512 transitions. [2022-02-21 00:01:56,254 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:56,255 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:56,255 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:56,255 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:56,255 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 381 states, 336 states have (on average 1.2738095238095237) internal successors, (428), 341 states have internal predecessors, (428), 31 states have call successors, (31), 14 states have call predecessors, (31), 13 states have return successors, (36), 26 states have call predecessors, (36), 26 states have call successors, (36) [2022-02-21 00:01:56,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 381 states to 381 states and 495 transitions. [2022-02-21 00:01:56,264 INFO L78 Accepts]: Start accepts. Automaton has 381 states and 495 transitions. Word has length 42 [2022-02-21 00:01:56,265 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:56,265 INFO L470 AbstractCegarLoop]: Abstraction has 381 states and 495 transitions. [2022-02-21 00:01:56,265 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 9.75) internal successors, (39), 3 states have internal predecessors, (39), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:56,265 INFO L276 IsEmpty]: Start isEmpty. Operand 381 states and 495 transitions. [2022-02-21 00:01:56,266 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-02-21 00:01:56,266 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:56,266 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:56,266 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2022-02-21 00:01:56,267 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:56,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:56,267 INFO L85 PathProgramCache]: Analyzing trace with hash -34042315, now seen corresponding path program 1 times [2022-02-21 00:01:56,267 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:56,267 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1229162693] [2022-02-21 00:01:56,268 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:56,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:56,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:56,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-21 00:01:56,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:56,359 INFO L290 TraceCheckUtils]: 0: Hoare triple {40659#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {40643#true} is VALID [2022-02-21 00:01:56,360 INFO L290 TraceCheckUtils]: 1: Hoare triple {40643#true} assume !(0 != ~compRegistered~0); {40643#true} is VALID [2022-02-21 00:01:56,360 INFO L290 TraceCheckUtils]: 2: Hoare triple {40643#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {40643#true} is VALID [2022-02-21 00:01:56,360 INFO L290 TraceCheckUtils]: 3: Hoare triple {40643#true} assume 0 == ~tmp_ndt_7~0#1; {40643#true} is VALID [2022-02-21 00:01:56,360 INFO L290 TraceCheckUtils]: 4: Hoare triple {40643#true} ~returnVal2~0#1 := 0; {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,361 INFO L290 TraceCheckUtils]: 5: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(~s~0 == ~NP~0); {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,361 INFO L290 TraceCheckUtils]: 6: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(~s~0 == ~MPR1~0); {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,362 INFO L290 TraceCheckUtils]: 7: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,362 INFO L290 TraceCheckUtils]: 8: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} #res#1 := ~returnVal2~0#1; {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:01:56,362 INFO L290 TraceCheckUtils]: 9: Hoare triple {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} assume true; {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:01:56,378 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} {40643#true} #767#return; {40656#(= |ULTIMATE.start_FloppyPnp_#t~ret34#1| 0)} is VALID [2022-02-21 00:01:56,378 INFO L290 TraceCheckUtils]: 0: Hoare triple {40643#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {40643#true} is VALID [2022-02-21 00:01:56,378 INFO L290 TraceCheckUtils]: 1: Hoare triple {40643#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {40643#true} is VALID [2022-02-21 00:01:56,379 INFO L290 TraceCheckUtils]: 2: Hoare triple {40643#true} assume { :end_inline__BLAST_init } true; {40643#true} is VALID [2022-02-21 00:01:56,379 INFO L290 TraceCheckUtils]: 3: Hoare triple {40643#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {40643#true} is VALID [2022-02-21 00:01:56,379 INFO L290 TraceCheckUtils]: 4: Hoare triple {40643#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {40643#true} is VALID [2022-02-21 00:01:56,379 INFO L290 TraceCheckUtils]: 5: Hoare triple {40643#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {40643#true} is VALID [2022-02-21 00:01:56,379 INFO L290 TraceCheckUtils]: 6: Hoare triple {40643#true} assume { :end_inline_stub_driver_init } true; {40643#true} is VALID [2022-02-21 00:01:56,379 INFO L290 TraceCheckUtils]: 7: Hoare triple {40643#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {40643#true} is VALID [2022-02-21 00:01:56,379 INFO L290 TraceCheckUtils]: 8: Hoare triple {40643#true} assume 3 == main_~tmp_ndt_1~0#1; {40643#true} is VALID [2022-02-21 00:01:56,380 INFO L290 TraceCheckUtils]: 9: Hoare triple {40643#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {40643#true} is VALID [2022-02-21 00:01:56,380 INFO L290 TraceCheckUtils]: 10: Hoare triple {40643#true} assume 1 == ~PagingReferenceCount~0; {40643#true} is VALID [2022-02-21 00:01:56,380 INFO L290 TraceCheckUtils]: 11: Hoare triple {40643#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {40643#true} is VALID [2022-02-21 00:01:56,380 INFO L290 TraceCheckUtils]: 12: Hoare triple {40643#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {40643#true} is VALID [2022-02-21 00:01:56,380 INFO L290 TraceCheckUtils]: 13: Hoare triple {40643#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {40643#true} is VALID [2022-02-21 00:01:56,380 INFO L290 TraceCheckUtils]: 14: Hoare triple {40643#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {40643#true} is VALID [2022-02-21 00:01:56,393 INFO L290 TraceCheckUtils]: 15: Hoare triple {40643#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {40643#true} is VALID [2022-02-21 00:01:56,393 INFO L290 TraceCheckUtils]: 16: Hoare triple {40643#true} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1; {40643#true} is VALID [2022-02-21 00:01:56,394 INFO L290 TraceCheckUtils]: 17: Hoare triple {40643#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {40643#true} is VALID [2022-02-21 00:01:56,394 INFO L290 TraceCheckUtils]: 18: Hoare triple {40643#true} FloppyPnp_#t~post32#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post32#1;havoc FloppyPnp_#t~post32#1;FloppyPnp_#t~post33#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post33#1;havoc FloppyPnp_#t~post33#1; {40643#true} is VALID [2022-02-21 00:01:56,395 INFO L272 TraceCheckUtils]: 19: Hoare triple {40643#true} call FloppyPnp_#t~ret34#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {40659#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:56,395 INFO L290 TraceCheckUtils]: 20: Hoare triple {40659#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {40643#true} is VALID [2022-02-21 00:01:56,395 INFO L290 TraceCheckUtils]: 21: Hoare triple {40643#true} assume !(0 != ~compRegistered~0); {40643#true} is VALID [2022-02-21 00:01:56,395 INFO L290 TraceCheckUtils]: 22: Hoare triple {40643#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {40643#true} is VALID [2022-02-21 00:01:56,395 INFO L290 TraceCheckUtils]: 23: Hoare triple {40643#true} assume 0 == ~tmp_ndt_7~0#1; {40643#true} is VALID [2022-02-21 00:01:56,396 INFO L290 TraceCheckUtils]: 24: Hoare triple {40643#true} ~returnVal2~0#1 := 0; {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,396 INFO L290 TraceCheckUtils]: 25: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(~s~0 == ~NP~0); {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,397 INFO L290 TraceCheckUtils]: 26: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(~s~0 == ~MPR1~0); {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,397 INFO L290 TraceCheckUtils]: 27: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:01:56,397 INFO L290 TraceCheckUtils]: 28: Hoare triple {40660#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} #res#1 := ~returnVal2~0#1; {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:01:56,398 INFO L290 TraceCheckUtils]: 29: Hoare triple {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} assume true; {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:01:56,399 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {40661#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} {40643#true} #767#return; {40656#(= |ULTIMATE.start_FloppyPnp_#t~ret34#1| 0)} is VALID [2022-02-21 00:01:56,399 INFO L290 TraceCheckUtils]: 31: Hoare triple {40656#(= |ULTIMATE.start_FloppyPnp_#t~ret34#1| 0)} assume -2147483648 <= FloppyPnp_#t~ret34#1 && FloppyPnp_#t~ret34#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret34#1;havoc FloppyPnp_#t~ret34#1;FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {40657#(= |ULTIMATE.start_FloppyPnp_#res#1| 0)} is VALID [2022-02-21 00:01:56,400 INFO L290 TraceCheckUtils]: 32: Hoare triple {40657#(= |ULTIMATE.start_FloppyPnp_#res#1| 0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,400 INFO L290 TraceCheckUtils]: 33: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(1 == ~pended~0); {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,400 INFO L290 TraceCheckUtils]: 34: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(1 == ~pended~0); {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,401 INFO L290 TraceCheckUtils]: 35: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume ~s~0 != ~UNLOADED~0; {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,401 INFO L290 TraceCheckUtils]: 36: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume -1 != main_~status~1#1; {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,401 INFO L290 TraceCheckUtils]: 37: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(~s~0 != ~SKIP2~0); {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,402 INFO L290 TraceCheckUtils]: 38: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(1 == ~pended~0); {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,402 INFO L290 TraceCheckUtils]: 39: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume ~s~0 == ~DC~0; {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:01:56,402 INFO L290 TraceCheckUtils]: 40: Hoare triple {40658#(= |ULTIMATE.start_main_~status~1#1| 0)} assume 259 == main_~status~1#1; {40644#false} is VALID [2022-02-21 00:01:56,402 INFO L272 TraceCheckUtils]: 41: Hoare triple {40644#false} call errorFn(); {40644#false} is VALID [2022-02-21 00:01:56,403 INFO L290 TraceCheckUtils]: 42: Hoare triple {40644#false} assume !false; {40644#false} is VALID [2022-02-21 00:01:56,403 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:56,403 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:56,403 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1229162693] [2022-02-21 00:01:56,403 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1229162693] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:56,404 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:56,404 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-21 00:01:56,404 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [458040039] [2022-02-21 00:01:56,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:56,405 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 43 [2022-02-21 00:01:56,405 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:56,405 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:56,432 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:56,433 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-21 00:01:56,434 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:56,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-21 00:01:56,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-02-21 00:01:56,435 INFO L87 Difference]: Start difference. First operand 381 states and 495 transitions. Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:57,525 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:57,526 INFO L93 Difference]: Finished difference Result 423 states and 547 transitions. [2022-02-21 00:01:57,526 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-21 00:01:57,526 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 43 [2022-02-21 00:01:57,526 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:57,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:57,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 335 transitions. [2022-02-21 00:01:57,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:57,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 335 transitions. [2022-02-21 00:01:57,532 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 335 transitions. [2022-02-21 00:01:57,754 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 335 edges. 335 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:57,761 INFO L225 Difference]: With dead ends: 423 [2022-02-21 00:01:57,761 INFO L226 Difference]: Without dead ends: 422 [2022-02-21 00:01:57,761 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 6 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2022-02-21 00:01:57,762 INFO L933 BasicCegarLoop]: 277 mSDtfsCounter, 227 mSDsluCounter, 1262 mSDsCounter, 0 mSdLazyCounter, 287 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 253 SdHoareTripleChecker+Valid, 1539 SdHoareTripleChecker+Invalid, 312 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 287 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:57,762 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [253 Valid, 1539 Invalid, 312 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 287 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:01:57,763 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 422 states. [2022-02-21 00:01:57,769 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 422 to 396. [2022-02-21 00:01:57,769 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:57,770 INFO L82 GeneralOperation]: Start isEquivalent. First operand 422 states. Second operand has 396 states, 350 states have (on average 1.262857142857143) internal successors, (442), 355 states have internal predecessors, (442), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (42), 27 states have call predecessors, (42), 26 states have call successors, (42) [2022-02-21 00:01:57,771 INFO L74 IsIncluded]: Start isIncluded. First operand 422 states. Second operand has 396 states, 350 states have (on average 1.262857142857143) internal successors, (442), 355 states have internal predecessors, (442), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (42), 27 states have call predecessors, (42), 26 states have call successors, (42) [2022-02-21 00:01:57,771 INFO L87 Difference]: Start difference. First operand 422 states. Second operand has 396 states, 350 states have (on average 1.262857142857143) internal successors, (442), 355 states have internal predecessors, (442), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (42), 27 states have call predecessors, (42), 26 states have call successors, (42) [2022-02-21 00:01:57,781 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:57,782 INFO L93 Difference]: Finished difference Result 422 states and 546 transitions. [2022-02-21 00:01:57,782 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 546 transitions. [2022-02-21 00:01:57,783 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:57,783 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:57,784 INFO L74 IsIncluded]: Start isIncluded. First operand has 396 states, 350 states have (on average 1.262857142857143) internal successors, (442), 355 states have internal predecessors, (442), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (42), 27 states have call predecessors, (42), 26 states have call successors, (42) Second operand 422 states. [2022-02-21 00:01:57,784 INFO L87 Difference]: Start difference. First operand has 396 states, 350 states have (on average 1.262857142857143) internal successors, (442), 355 states have internal predecessors, (442), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (42), 27 states have call predecessors, (42), 26 states have call successors, (42) Second operand 422 states. [2022-02-21 00:01:57,794 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:57,795 INFO L93 Difference]: Finished difference Result 422 states and 546 transitions. [2022-02-21 00:01:57,795 INFO L276 IsEmpty]: Start isEmpty. Operand 422 states and 546 transitions. [2022-02-21 00:01:57,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:57,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:57,796 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:57,796 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:57,799 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 396 states, 350 states have (on average 1.262857142857143) internal successors, (442), 355 states have internal predecessors, (442), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (42), 27 states have call predecessors, (42), 26 states have call successors, (42) [2022-02-21 00:01:57,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 396 states to 396 states and 515 transitions. [2022-02-21 00:01:57,809 INFO L78 Accepts]: Start accepts. Automaton has 396 states and 515 transitions. Word has length 43 [2022-02-21 00:01:57,809 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:57,809 INFO L470 AbstractCegarLoop]: Abstraction has 396 states and 515 transitions. [2022-02-21 00:01:57,809 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:57,810 INFO L276 IsEmpty]: Start isEmpty. Operand 396 states and 515 transitions. [2022-02-21 00:01:57,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 44 [2022-02-21 00:01:57,810 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:57,811 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:57,812 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable20 [2022-02-21 00:01:57,819 INFO L402 AbstractCegarLoop]: === Iteration 22 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:57,821 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:57,821 INFO L85 PathProgramCache]: Analyzing trace with hash -33765485, now seen corresponding path program 1 times [2022-02-21 00:01:57,822 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:57,822 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2040919603] [2022-02-21 00:01:57,822 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:57,822 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:57,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:57,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-21 00:01:57,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:57,913 INFO L290 TraceCheckUtils]: 0: Hoare triple {42351#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {42335#true} is VALID [2022-02-21 00:01:57,913 INFO L290 TraceCheckUtils]: 1: Hoare triple {42335#true} assume !(0 != ~compRegistered~0); {42335#true} is VALID [2022-02-21 00:01:57,913 INFO L290 TraceCheckUtils]: 2: Hoare triple {42335#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {42335#true} is VALID [2022-02-21 00:01:57,913 INFO L290 TraceCheckUtils]: 3: Hoare triple {42335#true} assume 0 == ~tmp_ndt_7~0#1; {42335#true} is VALID [2022-02-21 00:01:57,914 INFO L290 TraceCheckUtils]: 4: Hoare triple {42335#true} ~returnVal2~0#1 := 0; {42335#true} is VALID [2022-02-21 00:01:57,914 INFO L290 TraceCheckUtils]: 5: Hoare triple {42335#true} assume !(~s~0 == ~NP~0); {42335#true} is VALID [2022-02-21 00:01:57,914 INFO L290 TraceCheckUtils]: 6: Hoare triple {42335#true} assume !(~s~0 == ~MPR1~0); {42335#true} is VALID [2022-02-21 00:01:57,914 INFO L290 TraceCheckUtils]: 7: Hoare triple {42335#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {42352#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:01:57,915 INFO L290 TraceCheckUtils]: 8: Hoare triple {42352#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:01:57,915 INFO L290 TraceCheckUtils]: 9: Hoare triple {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:01:57,916 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {42335#true} #767#return; {42348#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret34#1|)} is VALID [2022-02-21 00:01:57,916 INFO L290 TraceCheckUtils]: 0: Hoare triple {42335#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {42335#true} is VALID [2022-02-21 00:01:57,916 INFO L290 TraceCheckUtils]: 1: Hoare triple {42335#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {42335#true} is VALID [2022-02-21 00:01:57,917 INFO L290 TraceCheckUtils]: 2: Hoare triple {42335#true} assume { :end_inline__BLAST_init } true; {42335#true} is VALID [2022-02-21 00:01:57,917 INFO L290 TraceCheckUtils]: 3: Hoare triple {42335#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {42335#true} is VALID [2022-02-21 00:01:57,917 INFO L290 TraceCheckUtils]: 4: Hoare triple {42335#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {42335#true} is VALID [2022-02-21 00:01:57,917 INFO L290 TraceCheckUtils]: 5: Hoare triple {42335#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {42335#true} is VALID [2022-02-21 00:01:57,917 INFO L290 TraceCheckUtils]: 6: Hoare triple {42335#true} assume { :end_inline_stub_driver_init } true; {42335#true} is VALID [2022-02-21 00:01:57,917 INFO L290 TraceCheckUtils]: 7: Hoare triple {42335#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {42335#true} is VALID [2022-02-21 00:01:57,917 INFO L290 TraceCheckUtils]: 8: Hoare triple {42335#true} assume 3 == main_~tmp_ndt_1~0#1; {42335#true} is VALID [2022-02-21 00:01:57,918 INFO L290 TraceCheckUtils]: 9: Hoare triple {42335#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {42335#true} is VALID [2022-02-21 00:01:57,918 INFO L290 TraceCheckUtils]: 10: Hoare triple {42335#true} assume 1 == ~PagingReferenceCount~0; {42335#true} is VALID [2022-02-21 00:01:57,918 INFO L290 TraceCheckUtils]: 11: Hoare triple {42335#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {42335#true} is VALID [2022-02-21 00:01:57,918 INFO L290 TraceCheckUtils]: 12: Hoare triple {42335#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {42335#true} is VALID [2022-02-21 00:01:57,918 INFO L290 TraceCheckUtils]: 13: Hoare triple {42335#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {42335#true} is VALID [2022-02-21 00:01:57,918 INFO L290 TraceCheckUtils]: 14: Hoare triple {42335#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {42335#true} is VALID [2022-02-21 00:01:57,919 INFO L290 TraceCheckUtils]: 15: Hoare triple {42335#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {42335#true} is VALID [2022-02-21 00:01:57,919 INFO L290 TraceCheckUtils]: 16: Hoare triple {42335#true} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1; {42335#true} is VALID [2022-02-21 00:01:57,919 INFO L290 TraceCheckUtils]: 17: Hoare triple {42335#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {42335#true} is VALID [2022-02-21 00:01:57,919 INFO L290 TraceCheckUtils]: 18: Hoare triple {42335#true} FloppyPnp_#t~post32#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post32#1;havoc FloppyPnp_#t~post32#1;FloppyPnp_#t~post33#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post33#1;havoc FloppyPnp_#t~post33#1; {42335#true} is VALID [2022-02-21 00:01:57,920 INFO L272 TraceCheckUtils]: 19: Hoare triple {42335#true} call FloppyPnp_#t~ret34#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {42351#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:57,920 INFO L290 TraceCheckUtils]: 20: Hoare triple {42351#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {42335#true} is VALID [2022-02-21 00:01:57,920 INFO L290 TraceCheckUtils]: 21: Hoare triple {42335#true} assume !(0 != ~compRegistered~0); {42335#true} is VALID [2022-02-21 00:01:57,920 INFO L290 TraceCheckUtils]: 22: Hoare triple {42335#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {42335#true} is VALID [2022-02-21 00:01:57,921 INFO L290 TraceCheckUtils]: 23: Hoare triple {42335#true} assume 0 == ~tmp_ndt_7~0#1; {42335#true} is VALID [2022-02-21 00:01:57,921 INFO L290 TraceCheckUtils]: 24: Hoare triple {42335#true} ~returnVal2~0#1 := 0; {42335#true} is VALID [2022-02-21 00:01:57,921 INFO L290 TraceCheckUtils]: 25: Hoare triple {42335#true} assume !(~s~0 == ~NP~0); {42335#true} is VALID [2022-02-21 00:01:57,921 INFO L290 TraceCheckUtils]: 26: Hoare triple {42335#true} assume !(~s~0 == ~MPR1~0); {42335#true} is VALID [2022-02-21 00:01:57,921 INFO L290 TraceCheckUtils]: 27: Hoare triple {42335#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {42352#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:01:57,922 INFO L290 TraceCheckUtils]: 28: Hoare triple {42352#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:01:57,922 INFO L290 TraceCheckUtils]: 29: Hoare triple {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:01:57,923 INFO L284 TraceCheckUtils]: 30: Hoare quadruple {42353#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {42335#true} #767#return; {42348#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret34#1|)} is VALID [2022-02-21 00:01:57,923 INFO L290 TraceCheckUtils]: 31: Hoare triple {42348#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret34#1|)} assume -2147483648 <= FloppyPnp_#t~ret34#1 && FloppyPnp_#t~ret34#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret34#1;havoc FloppyPnp_#t~ret34#1;FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {42349#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} is VALID [2022-02-21 00:01:57,924 INFO L290 TraceCheckUtils]: 32: Hoare triple {42349#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,924 INFO L290 TraceCheckUtils]: 33: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,924 INFO L290 TraceCheckUtils]: 34: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,925 INFO L290 TraceCheckUtils]: 35: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,925 INFO L290 TraceCheckUtils]: 36: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume -1 != main_~status~1#1; {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,925 INFO L290 TraceCheckUtils]: 37: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,926 INFO L290 TraceCheckUtils]: 38: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,926 INFO L290 TraceCheckUtils]: 39: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:01:57,926 INFO L290 TraceCheckUtils]: 40: Hoare triple {42350#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume main_~status~1#1 != ~lowerDriverReturn~0; {42336#false} is VALID [2022-02-21 00:01:57,926 INFO L272 TraceCheckUtils]: 41: Hoare triple {42336#false} call errorFn(); {42336#false} is VALID [2022-02-21 00:01:57,927 INFO L290 TraceCheckUtils]: 42: Hoare triple {42336#false} assume !false; {42336#false} is VALID [2022-02-21 00:01:57,927 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:57,927 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:57,927 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2040919603] [2022-02-21 00:01:57,927 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2040919603] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:57,927 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:57,928 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-02-21 00:01:57,928 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82392032] [2022-02-21 00:01:57,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:57,928 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 43 [2022-02-21 00:01:57,929 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:57,929 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:57,956 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 43 edges. 43 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:57,956 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-02-21 00:01:57,956 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:57,957 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-02-21 00:01:57,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-02-21 00:01:57,958 INFO L87 Difference]: Start difference. First operand 396 states and 515 transitions. Second operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:59,072 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:59,072 INFO L93 Difference]: Finished difference Result 419 states and 540 transitions. [2022-02-21 00:01:59,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-21 00:01:59,072 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 43 [2022-02-21 00:01:59,073 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:01:59,073 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:59,075 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 317 transitions. [2022-02-21 00:01:59,075 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:59,077 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 317 transitions. [2022-02-21 00:01:59,077 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 317 transitions. [2022-02-21 00:01:59,277 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 317 edges. 317 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:59,286 INFO L225 Difference]: With dead ends: 419 [2022-02-21 00:01:59,286 INFO L226 Difference]: Without dead ends: 409 [2022-02-21 00:01:59,287 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 11 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=21, Invalid=69, Unknown=0, NotChecked=0, Total=90 [2022-02-21 00:01:59,287 INFO L933 BasicCegarLoop]: 279 mSDtfsCounter, 49 mSDsluCounter, 1370 mSDsCounter, 0 mSdLazyCounter, 365 mSolverCounterSat, 25 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 49 SdHoareTripleChecker+Valid, 1649 SdHoareTripleChecker+Invalid, 390 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 25 IncrementalHoareTripleChecker+Valid, 365 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:01:59,287 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [49 Valid, 1649 Invalid, 390 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [25 Valid, 365 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:01:59,288 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 409 states. [2022-02-21 00:01:59,294 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 409 to 393. [2022-02-21 00:01:59,294 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:01:59,295 INFO L82 GeneralOperation]: Start isEquivalent. First operand 409 states. Second operand has 393 states, 347 states have (on average 1.2651296829971181) internal successors, (439), 353 states have internal predecessors, (439), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (41), 26 states have call predecessors, (41), 26 states have call successors, (41) [2022-02-21 00:01:59,295 INFO L74 IsIncluded]: Start isIncluded. First operand 409 states. Second operand has 393 states, 347 states have (on average 1.2651296829971181) internal successors, (439), 353 states have internal predecessors, (439), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (41), 26 states have call predecessors, (41), 26 states have call successors, (41) [2022-02-21 00:01:59,296 INFO L87 Difference]: Start difference. First operand 409 states. Second operand has 393 states, 347 states have (on average 1.2651296829971181) internal successors, (439), 353 states have internal predecessors, (439), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (41), 26 states have call predecessors, (41), 26 states have call successors, (41) [2022-02-21 00:01:59,305 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:59,305 INFO L93 Difference]: Finished difference Result 409 states and 529 transitions. [2022-02-21 00:01:59,305 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 529 transitions. [2022-02-21 00:01:59,306 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:59,307 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:59,307 INFO L74 IsIncluded]: Start isIncluded. First operand has 393 states, 347 states have (on average 1.2651296829971181) internal successors, (439), 353 states have internal predecessors, (439), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (41), 26 states have call predecessors, (41), 26 states have call successors, (41) Second operand 409 states. [2022-02-21 00:01:59,308 INFO L87 Difference]: Start difference. First operand has 393 states, 347 states have (on average 1.2651296829971181) internal successors, (439), 353 states have internal predecessors, (439), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (41), 26 states have call predecessors, (41), 26 states have call successors, (41) Second operand 409 states. [2022-02-21 00:01:59,317 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:01:59,317 INFO L93 Difference]: Finished difference Result 409 states and 529 transitions. [2022-02-21 00:01:59,318 INFO L276 IsEmpty]: Start isEmpty. Operand 409 states and 529 transitions. [2022-02-21 00:01:59,319 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:01:59,319 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:01:59,319 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:01:59,319 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:01:59,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 393 states, 347 states have (on average 1.2651296829971181) internal successors, (439), 353 states have internal predecessors, (439), 31 states have call successors, (31), 14 states have call predecessors, (31), 14 states have return successors, (41), 26 states have call predecessors, (41), 26 states have call successors, (41) [2022-02-21 00:01:59,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 393 states to 393 states and 511 transitions. [2022-02-21 00:01:59,328 INFO L78 Accepts]: Start accepts. Automaton has 393 states and 511 transitions. Word has length 43 [2022-02-21 00:01:59,329 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:01:59,329 INFO L470 AbstractCegarLoop]: Abstraction has 393 states and 511 transitions. [2022-02-21 00:01:59,329 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 5.0) internal successors, (40), 6 states have internal predecessors, (40), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:59,329 INFO L276 IsEmpty]: Start isEmpty. Operand 393 states and 511 transitions. [2022-02-21 00:01:59,330 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 45 [2022-02-21 00:01:59,330 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:01:59,330 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:01:59,330 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable21 [2022-02-21 00:01:59,331 INFO L402 AbstractCegarLoop]: === Iteration 23 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:01:59,331 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:01:59,331 INFO L85 PathProgramCache]: Analyzing trace with hash 1181888463, now seen corresponding path program 1 times [2022-02-21 00:01:59,331 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:01:59,331 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1567310724] [2022-02-21 00:01:59,332 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:01:59,332 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:01:59,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:59,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 19 [2022-02-21 00:01:59,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:01:59,404 INFO L290 TraceCheckUtils]: 0: Hoare triple {44006#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {43990#true} is VALID [2022-02-21 00:01:59,404 INFO L290 TraceCheckUtils]: 1: Hoare triple {43990#true} assume !(0 != ~compRegistered~0); {43990#true} is VALID [2022-02-21 00:01:59,404 INFO L290 TraceCheckUtils]: 2: Hoare triple {43990#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {43990#true} is VALID [2022-02-21 00:01:59,404 INFO L290 TraceCheckUtils]: 3: Hoare triple {43990#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {43990#true} is VALID [2022-02-21 00:01:59,405 INFO L290 TraceCheckUtils]: 4: Hoare triple {43990#true} assume 1 == ~tmp_ndt_8~0#1; {43990#true} is VALID [2022-02-21 00:01:59,405 INFO L290 TraceCheckUtils]: 5: Hoare triple {43990#true} ~returnVal2~0#1 := -1073741823; {43990#true} is VALID [2022-02-21 00:01:59,405 INFO L290 TraceCheckUtils]: 6: Hoare triple {43990#true} assume !(~s~0 == ~NP~0); {43990#true} is VALID [2022-02-21 00:01:59,405 INFO L290 TraceCheckUtils]: 7: Hoare triple {43990#true} assume !(~s~0 == ~MPR1~0); {43990#true} is VALID [2022-02-21 00:01:59,406 INFO L290 TraceCheckUtils]: 8: Hoare triple {43990#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {44007#(<= ~SKIP2~0 ~s~0)} is VALID [2022-02-21 00:01:59,406 INFO L290 TraceCheckUtils]: 9: Hoare triple {44007#(<= ~SKIP2~0 ~s~0)} #res#1 := ~returnVal2~0#1; {44007#(<= ~SKIP2~0 ~s~0)} is VALID [2022-02-21 00:01:59,406 INFO L290 TraceCheckUtils]: 10: Hoare triple {44007#(<= ~SKIP2~0 ~s~0)} assume true; {44007#(<= ~SKIP2~0 ~s~0)} is VALID [2022-02-21 00:01:59,407 INFO L284 TraceCheckUtils]: 11: Hoare quadruple {44007#(<= ~SKIP2~0 ~s~0)} {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #767#return; {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,408 INFO L290 TraceCheckUtils]: 0: Hoare triple {43990#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {43990#true} is VALID [2022-02-21 00:01:59,412 INFO L290 TraceCheckUtils]: 1: Hoare triple {43990#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,412 INFO L290 TraceCheckUtils]: 2: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume { :end_inline__BLAST_init } true; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,413 INFO L290 TraceCheckUtils]: 3: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,413 INFO L290 TraceCheckUtils]: 4: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,413 INFO L290 TraceCheckUtils]: 5: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,414 INFO L290 TraceCheckUtils]: 6: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume { :end_inline_stub_driver_init } true; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,414 INFO L290 TraceCheckUtils]: 7: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,415 INFO L290 TraceCheckUtils]: 8: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 3 == main_~tmp_ndt_1~0#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,416 INFO L290 TraceCheckUtils]: 9: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,416 INFO L290 TraceCheckUtils]: 10: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 1 == ~PagingReferenceCount~0; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,417 INFO L290 TraceCheckUtils]: 11: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,417 INFO L290 TraceCheckUtils]: 12: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,418 INFO L290 TraceCheckUtils]: 13: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,418 INFO L290 TraceCheckUtils]: 14: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,418 INFO L290 TraceCheckUtils]: 15: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,419 INFO L290 TraceCheckUtils]: 16: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,419 INFO L290 TraceCheckUtils]: 17: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,420 INFO L290 TraceCheckUtils]: 18: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} FloppyPnp_#t~post32#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post32#1;havoc FloppyPnp_#t~post32#1;FloppyPnp_#t~post33#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post33#1;havoc FloppyPnp_#t~post33#1; {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} is VALID [2022-02-21 00:01:59,421 INFO L272 TraceCheckUtils]: 19: Hoare triple {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} call FloppyPnp_#t~ret34#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {44006#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:01:59,421 INFO L290 TraceCheckUtils]: 20: Hoare triple {44006#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {43990#true} is VALID [2022-02-21 00:01:59,421 INFO L290 TraceCheckUtils]: 21: Hoare triple {43990#true} assume !(0 != ~compRegistered~0); {43990#true} is VALID [2022-02-21 00:01:59,421 INFO L290 TraceCheckUtils]: 22: Hoare triple {43990#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {43990#true} is VALID [2022-02-21 00:01:59,421 INFO L290 TraceCheckUtils]: 23: Hoare triple {43990#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {43990#true} is VALID [2022-02-21 00:01:59,421 INFO L290 TraceCheckUtils]: 24: Hoare triple {43990#true} assume 1 == ~tmp_ndt_8~0#1; {43990#true} is VALID [2022-02-21 00:01:59,422 INFO L290 TraceCheckUtils]: 25: Hoare triple {43990#true} ~returnVal2~0#1 := -1073741823; {43990#true} is VALID [2022-02-21 00:01:59,422 INFO L290 TraceCheckUtils]: 26: Hoare triple {43990#true} assume !(~s~0 == ~NP~0); {43990#true} is VALID [2022-02-21 00:01:59,422 INFO L290 TraceCheckUtils]: 27: Hoare triple {43990#true} assume !(~s~0 == ~MPR1~0); {43990#true} is VALID [2022-02-21 00:01:59,422 INFO L290 TraceCheckUtils]: 28: Hoare triple {43990#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {44007#(<= ~SKIP2~0 ~s~0)} is VALID [2022-02-21 00:01:59,423 INFO L290 TraceCheckUtils]: 29: Hoare triple {44007#(<= ~SKIP2~0 ~s~0)} #res#1 := ~returnVal2~0#1; {44007#(<= ~SKIP2~0 ~s~0)} is VALID [2022-02-21 00:01:59,423 INFO L290 TraceCheckUtils]: 30: Hoare triple {44007#(<= ~SKIP2~0 ~s~0)} assume true; {44007#(<= ~SKIP2~0 ~s~0)} is VALID [2022-02-21 00:01:59,424 INFO L284 TraceCheckUtils]: 31: Hoare quadruple {44007#(<= ~SKIP2~0 ~s~0)} {43992#(and (= 2 ~DC~0) (<= 4 ~SKIP2~0))} #767#return; {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,424 INFO L290 TraceCheckUtils]: 32: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume -2147483648 <= FloppyPnp_#t~ret34#1 && FloppyPnp_#t~ret34#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret34#1;havoc FloppyPnp_#t~ret34#1;FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,425 INFO L290 TraceCheckUtils]: 33: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,425 INFO L290 TraceCheckUtils]: 34: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(1 == ~pended~0); {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,426 INFO L290 TraceCheckUtils]: 35: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(1 == ~pended~0); {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,426 INFO L290 TraceCheckUtils]: 36: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume ~s~0 != ~UNLOADED~0; {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,427 INFO L290 TraceCheckUtils]: 37: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume -1 != main_~status~1#1; {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,427 INFO L290 TraceCheckUtils]: 38: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(~s~0 != ~SKIP2~0); {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,427 INFO L290 TraceCheckUtils]: 39: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume !(1 == ~pended~0); {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} is VALID [2022-02-21 00:01:59,428 INFO L290 TraceCheckUtils]: 40: Hoare triple {44005#(and (= 2 ~DC~0) (not (= 2 ~s~0)))} assume ~s~0 == ~DC~0; {43991#false} is VALID [2022-02-21 00:01:59,428 INFO L290 TraceCheckUtils]: 41: Hoare triple {43991#false} assume 259 == main_~status~1#1; {43991#false} is VALID [2022-02-21 00:01:59,428 INFO L272 TraceCheckUtils]: 42: Hoare triple {43991#false} call errorFn(); {43991#false} is VALID [2022-02-21 00:01:59,428 INFO L290 TraceCheckUtils]: 43: Hoare triple {43991#false} assume !false; {43991#false} is VALID [2022-02-21 00:01:59,428 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:01:59,429 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:01:59,429 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1567310724] [2022-02-21 00:01:59,429 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1567310724] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:01:59,429 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:01:59,429 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2022-02-21 00:01:59,429 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1994274462] [2022-02-21 00:01:59,430 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:01:59,430 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 44 [2022-02-21 00:01:59,430 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:01:59,430 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:01:59,460 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 44 edges. 44 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:01:59,461 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2022-02-21 00:01:59,461 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:01:59,461 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2022-02-21 00:01:59,461 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2022-02-21 00:01:59,462 INFO L87 Difference]: Start difference. First operand 393 states and 511 transitions. Second operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:00,390 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:00,390 INFO L93 Difference]: Finished difference Result 409 states and 526 transitions. [2022-02-21 00:02:00,391 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-21 00:02:00,391 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 44 [2022-02-21 00:02:00,391 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:00,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:00,394 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 325 transitions. [2022-02-21 00:02:00,394 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:00,396 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 325 transitions. [2022-02-21 00:02:00,396 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 325 transitions. [2022-02-21 00:02:00,628 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 325 edges. 325 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:00,636 INFO L225 Difference]: With dead ends: 409 [2022-02-21 00:02:00,636 INFO L226 Difference]: Without dead ends: 397 [2022-02-21 00:02:00,636 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 12 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-21 00:02:00,637 INFO L933 BasicCegarLoop]: 283 mSDtfsCounter, 384 mSDsluCounter, 554 mSDsCounter, 0 mSdLazyCounter, 237 mSolverCounterSat, 49 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 391 SdHoareTripleChecker+Valid, 837 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 49 IncrementalHoareTripleChecker+Valid, 237 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:00,637 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [391 Valid, 837 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [49 Valid, 237 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:02:00,638 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 397 states. [2022-02-21 00:02:00,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 397 to 377. [2022-02-21 00:02:00,646 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:00,646 INFO L82 GeneralOperation]: Start isEquivalent. First operand 397 states. Second operand has 377 states, 333 states have (on average 1.2702702702702702) internal successors, (423), 338 states have internal predecessors, (423), 30 states have call successors, (30), 14 states have call predecessors, (30), 13 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2022-02-21 00:02:00,647 INFO L74 IsIncluded]: Start isIncluded. First operand 397 states. Second operand has 377 states, 333 states have (on average 1.2702702702702702) internal successors, (423), 338 states have internal predecessors, (423), 30 states have call successors, (30), 14 states have call predecessors, (30), 13 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2022-02-21 00:02:00,647 INFO L87 Difference]: Start difference. First operand 397 states. Second operand has 377 states, 333 states have (on average 1.2702702702702702) internal successors, (423), 338 states have internal predecessors, (423), 30 states have call successors, (30), 14 states have call predecessors, (30), 13 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2022-02-21 00:02:00,656 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:00,656 INFO L93 Difference]: Finished difference Result 397 states and 513 transitions. [2022-02-21 00:02:00,657 INFO L276 IsEmpty]: Start isEmpty. Operand 397 states and 513 transitions. [2022-02-21 00:02:00,658 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:00,658 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:00,658 INFO L74 IsIncluded]: Start isIncluded. First operand has 377 states, 333 states have (on average 1.2702702702702702) internal successors, (423), 338 states have internal predecessors, (423), 30 states have call successors, (30), 14 states have call predecessors, (30), 13 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) Second operand 397 states. [2022-02-21 00:02:00,659 INFO L87 Difference]: Start difference. First operand has 377 states, 333 states have (on average 1.2702702702702702) internal successors, (423), 338 states have internal predecessors, (423), 30 states have call successors, (30), 14 states have call predecessors, (30), 13 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) Second operand 397 states. [2022-02-21 00:02:00,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:00,668 INFO L93 Difference]: Finished difference Result 397 states and 513 transitions. [2022-02-21 00:02:00,668 INFO L276 IsEmpty]: Start isEmpty. Operand 397 states and 513 transitions. [2022-02-21 00:02:00,669 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:00,669 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:00,669 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:00,670 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:00,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 377 states, 333 states have (on average 1.2702702702702702) internal successors, (423), 338 states have internal predecessors, (423), 30 states have call successors, (30), 14 states have call predecessors, (30), 13 states have return successors, (35), 25 states have call predecessors, (35), 25 states have call successors, (35) [2022-02-21 00:02:00,678 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 377 states to 377 states and 488 transitions. [2022-02-21 00:02:00,678 INFO L78 Accepts]: Start accepts. Automaton has 377 states and 488 transitions. Word has length 44 [2022-02-21 00:02:00,678 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:00,678 INFO L470 AbstractCegarLoop]: Abstraction has 377 states and 488 transitions. [2022-02-21 00:02:00,678 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 6.833333333333333) internal successors, (41), 5 states have internal predecessors, (41), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:00,678 INFO L276 IsEmpty]: Start isEmpty. Operand 377 states and 488 transitions. [2022-02-21 00:02:00,679 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 47 [2022-02-21 00:02:00,679 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:00,680 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:00,680 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable22 [2022-02-21 00:02:00,680 INFO L402 AbstractCegarLoop]: === Iteration 24 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:00,680 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:00,680 INFO L85 PathProgramCache]: Analyzing trace with hash 1424622961, now seen corresponding path program 1 times [2022-02-21 00:02:00,681 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:00,681 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1845875437] [2022-02-21 00:02:00,681 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:00,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:00,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:00,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-21 00:02:00,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:00,761 INFO L290 TraceCheckUtils]: 0: Hoare triple {45619#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {45599#true} is VALID [2022-02-21 00:02:00,761 INFO L290 TraceCheckUtils]: 1: Hoare triple {45599#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,761 INFO L290 TraceCheckUtils]: 2: Hoare triple {45618#(= ~setEventCalled~0 1)} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,762 INFO L290 TraceCheckUtils]: 3: Hoare triple {45618#(= ~setEventCalled~0 1)} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,762 INFO L290 TraceCheckUtils]: 4: Hoare triple {45618#(= ~setEventCalled~0 1)} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,762 INFO L290 TraceCheckUtils]: 5: Hoare triple {45618#(= ~setEventCalled~0 1)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,763 INFO L290 TraceCheckUtils]: 6: Hoare triple {45618#(= ~setEventCalled~0 1)} assume { :end_inline_stubMoreProcessingRequired } true; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,763 INFO L290 TraceCheckUtils]: 7: Hoare triple {45618#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,763 INFO L290 TraceCheckUtils]: 8: Hoare triple {45618#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,764 INFO L290 TraceCheckUtils]: 9: Hoare triple {45618#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_8~0#1); {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,764 INFO L290 TraceCheckUtils]: 10: Hoare triple {45618#(= ~setEventCalled~0 1)} ~returnVal2~0#1 := 259; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,764 INFO L290 TraceCheckUtils]: 11: Hoare triple {45618#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,765 INFO L290 TraceCheckUtils]: 12: Hoare triple {45618#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,765 INFO L290 TraceCheckUtils]: 13: Hoare triple {45618#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,765 INFO L290 TraceCheckUtils]: 14: Hoare triple {45618#(= ~setEventCalled~0 1)} #res#1 := ~returnVal2~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,766 INFO L290 TraceCheckUtils]: 15: Hoare triple {45618#(= ~setEventCalled~0 1)} assume true; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,766 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {45618#(= ~setEventCalled~0 1)} {45599#true} #753#return; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,767 INFO L290 TraceCheckUtils]: 0: Hoare triple {45599#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {45599#true} is VALID [2022-02-21 00:02:00,767 INFO L290 TraceCheckUtils]: 1: Hoare triple {45599#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {45599#true} is VALID [2022-02-21 00:02:00,767 INFO L290 TraceCheckUtils]: 2: Hoare triple {45599#true} assume { :end_inline__BLAST_init } true; {45599#true} is VALID [2022-02-21 00:02:00,767 INFO L290 TraceCheckUtils]: 3: Hoare triple {45599#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {45599#true} is VALID [2022-02-21 00:02:00,767 INFO L290 TraceCheckUtils]: 4: Hoare triple {45599#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {45599#true} is VALID [2022-02-21 00:02:00,768 INFO L290 TraceCheckUtils]: 5: Hoare triple {45599#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {45599#true} is VALID [2022-02-21 00:02:00,768 INFO L290 TraceCheckUtils]: 6: Hoare triple {45599#true} assume { :end_inline_stub_driver_init } true; {45599#true} is VALID [2022-02-21 00:02:00,768 INFO L290 TraceCheckUtils]: 7: Hoare triple {45599#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {45599#true} is VALID [2022-02-21 00:02:00,768 INFO L290 TraceCheckUtils]: 8: Hoare triple {45599#true} assume 3 == main_~tmp_ndt_1~0#1; {45599#true} is VALID [2022-02-21 00:02:00,768 INFO L290 TraceCheckUtils]: 9: Hoare triple {45599#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {45599#true} is VALID [2022-02-21 00:02:00,768 INFO L290 TraceCheckUtils]: 10: Hoare triple {45599#true} assume 1 == ~PagingReferenceCount~0; {45599#true} is VALID [2022-02-21 00:02:00,769 INFO L290 TraceCheckUtils]: 11: Hoare triple {45599#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {45599#true} is VALID [2022-02-21 00:02:00,769 INFO L290 TraceCheckUtils]: 12: Hoare triple {45599#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {45599#true} is VALID [2022-02-21 00:02:00,769 INFO L290 TraceCheckUtils]: 13: Hoare triple {45599#true} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {45599#true} is VALID [2022-02-21 00:02:00,769 INFO L290 TraceCheckUtils]: 14: Hoare triple {45599#true} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {45599#true} is VALID [2022-02-21 00:02:00,769 INFO L290 TraceCheckUtils]: 15: Hoare triple {45599#true} assume !(~s~0 != ~NP~0); {45599#true} is VALID [2022-02-21 00:02:00,770 INFO L290 TraceCheckUtils]: 16: Hoare triple {45599#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {45599#true} is VALID [2022-02-21 00:02:00,770 INFO L290 TraceCheckUtils]: 17: Hoare triple {45599#true} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {45599#true} is VALID [2022-02-21 00:02:00,770 INFO L272 TraceCheckUtils]: 18: Hoare triple {45599#true} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {45619#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:00,771 INFO L290 TraceCheckUtils]: 19: Hoare triple {45619#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {45599#true} is VALID [2022-02-21 00:02:00,771 INFO L290 TraceCheckUtils]: 20: Hoare triple {45599#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,771 INFO L290 TraceCheckUtils]: 21: Hoare triple {45618#(= ~setEventCalled~0 1)} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,772 INFO L290 TraceCheckUtils]: 22: Hoare triple {45618#(= ~setEventCalled~0 1)} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,772 INFO L290 TraceCheckUtils]: 23: Hoare triple {45618#(= ~setEventCalled~0 1)} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,772 INFO L290 TraceCheckUtils]: 24: Hoare triple {45618#(= ~setEventCalled~0 1)} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,773 INFO L290 TraceCheckUtils]: 25: Hoare triple {45618#(= ~setEventCalled~0 1)} assume { :end_inline_stubMoreProcessingRequired } true; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,773 INFO L290 TraceCheckUtils]: 26: Hoare triple {45618#(= ~setEventCalled~0 1)} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,773 INFO L290 TraceCheckUtils]: 27: Hoare triple {45618#(= ~setEventCalled~0 1)} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,774 INFO L290 TraceCheckUtils]: 28: Hoare triple {45618#(= ~setEventCalled~0 1)} assume !(1 == ~tmp_ndt_8~0#1); {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,774 INFO L290 TraceCheckUtils]: 29: Hoare triple {45618#(= ~setEventCalled~0 1)} ~returnVal2~0#1 := 259; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,774 INFO L290 TraceCheckUtils]: 30: Hoare triple {45618#(= ~setEventCalled~0 1)} assume !(~s~0 == ~NP~0); {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,775 INFO L290 TraceCheckUtils]: 31: Hoare triple {45618#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR1~0; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,775 INFO L290 TraceCheckUtils]: 32: Hoare triple {45618#(= ~setEventCalled~0 1)} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,775 INFO L290 TraceCheckUtils]: 33: Hoare triple {45618#(= ~setEventCalled~0 1)} #res#1 := ~returnVal2~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,776 INFO L290 TraceCheckUtils]: 34: Hoare triple {45618#(= ~setEventCalled~0 1)} assume true; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,776 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {45618#(= ~setEventCalled~0 1)} {45599#true} #753#return; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,776 INFO L290 TraceCheckUtils]: 36: Hoare triple {45618#(= ~setEventCalled~0 1)} assume -2147483648 <= FloppyStartDevice_#t~ret74#1 && FloppyStartDevice_#t~ret74#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret74#1;havoc FloppyStartDevice_#t~ret74#1;FloppyStartDevice_~__cil_tmp42~0#1 := FloppyStartDevice_~ntStatus~1#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,777 INFO L290 TraceCheckUtils]: 37: Hoare triple {45618#(= ~setEventCalled~0 1)} assume 259 == FloppyStartDevice_~__cil_tmp42~0#1; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,777 INFO L272 TraceCheckUtils]: 38: Hoare triple {45618#(= ~setEventCalled~0 1)} call FloppyStartDevice_#t~ret75#1 := KeWaitForSingleObject(FloppyStartDevice_~doneEvent~1#1, ~Executive~0, ~KernelMode~0, 0, 0); {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,778 INFO L290 TraceCheckUtils]: 39: Hoare triple {45618#(= ~setEventCalled~0 1)} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,778 INFO L290 TraceCheckUtils]: 40: Hoare triple {45618#(= ~setEventCalled~0 1)} assume ~s~0 == ~MPR3~0; {45618#(= ~setEventCalled~0 1)} is VALID [2022-02-21 00:02:00,778 INFO L290 TraceCheckUtils]: 41: Hoare triple {45618#(= ~setEventCalled~0 1)} assume !(1 == ~setEventCalled~0); {45600#false} is VALID [2022-02-21 00:02:00,779 INFO L290 TraceCheckUtils]: 42: Hoare triple {45600#false} assume !(1 == ~customIrp~0); {45600#false} is VALID [2022-02-21 00:02:00,779 INFO L290 TraceCheckUtils]: 43: Hoare triple {45600#false} assume ~s~0 == ~MPR3~0; {45600#false} is VALID [2022-02-21 00:02:00,779 INFO L272 TraceCheckUtils]: 44: Hoare triple {45600#false} call errorFn(); {45600#false} is VALID [2022-02-21 00:02:00,779 INFO L290 TraceCheckUtils]: 45: Hoare triple {45600#false} assume !false; {45600#false} is VALID [2022-02-21 00:02:00,779 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:00,780 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:00,780 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1845875437] [2022-02-21 00:02:00,780 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1845875437] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:00,780 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:00,780 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-02-21 00:02:00,781 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [707613290] [2022-02-21 00:02:00,781 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:00,782 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 3 states have internal predecessors, (42), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 46 [2022-02-21 00:02:00,782 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:00,782 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 4 states, 4 states have (on average 10.5) internal successors, (42), 3 states have internal predecessors, (42), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:00,812 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 46 edges. 46 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:00,813 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-02-21 00:02:00,813 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:00,813 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-02-21 00:02:00,813 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-02-21 00:02:00,814 INFO L87 Difference]: Start difference. First operand 377 states and 488 transitions. Second operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 3 states have internal predecessors, (42), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:01,307 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:01,307 INFO L93 Difference]: Finished difference Result 468 states and 599 transitions. [2022-02-21 00:02:01,307 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-02-21 00:02:01,307 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 3 states have internal predecessors, (42), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 46 [2022-02-21 00:02:01,308 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:01,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 3 states have internal predecessors, (42), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:01,310 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 412 transitions. [2022-02-21 00:02:01,310 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 4 states, 4 states have (on average 10.5) internal successors, (42), 3 states have internal predecessors, (42), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:01,312 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 412 transitions. [2022-02-21 00:02:01,313 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 5 states and 412 transitions. [2022-02-21 00:02:01,570 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 412 edges. 412 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:01,581 INFO L225 Difference]: With dead ends: 468 [2022-02-21 00:02:01,581 INFO L226 Difference]: Without dead ends: 468 [2022-02-21 00:02:01,581 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 9 GetRequests, 5 SyntacticMatches, 1 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-02-21 00:02:01,582 INFO L933 BasicCegarLoop]: 319 mSDtfsCounter, 160 mSDsluCounter, 428 mSDsCounter, 0 mSdLazyCounter, 111 mSolverCounterSat, 28 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 161 SdHoareTripleChecker+Valid, 747 SdHoareTripleChecker+Invalid, 139 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 28 IncrementalHoareTripleChecker+Valid, 111 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:01,582 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [161 Valid, 747 Invalid, 139 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [28 Valid, 111 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-02-21 00:02:01,585 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 468 states. [2022-02-21 00:02:01,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 468 to 430. [2022-02-21 00:02:01,591 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:01,591 INFO L82 GeneralOperation]: Start isEquivalent. First operand 468 states. Second operand has 430 states, 381 states have (on average 1.2703412073490814) internal successors, (484), 385 states have internal predecessors, (484), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:01,592 INFO L74 IsIncluded]: Start isIncluded. First operand 468 states. Second operand has 430 states, 381 states have (on average 1.2703412073490814) internal successors, (484), 385 states have internal predecessors, (484), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:01,593 INFO L87 Difference]: Start difference. First operand 468 states. Second operand has 430 states, 381 states have (on average 1.2703412073490814) internal successors, (484), 385 states have internal predecessors, (484), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:01,604 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:01,604 INFO L93 Difference]: Finished difference Result 468 states and 599 transitions. [2022-02-21 00:02:01,604 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 599 transitions. [2022-02-21 00:02:01,606 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:01,606 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:01,607 INFO L74 IsIncluded]: Start isIncluded. First operand has 430 states, 381 states have (on average 1.2703412073490814) internal successors, (484), 385 states have internal predecessors, (484), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) Second operand 468 states. [2022-02-21 00:02:01,607 INFO L87 Difference]: Start difference. First operand has 430 states, 381 states have (on average 1.2703412073490814) internal successors, (484), 385 states have internal predecessors, (484), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) Second operand 468 states. [2022-02-21 00:02:01,619 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:01,619 INFO L93 Difference]: Finished difference Result 468 states and 599 transitions. [2022-02-21 00:02:01,619 INFO L276 IsEmpty]: Start isEmpty. Operand 468 states and 599 transitions. [2022-02-21 00:02:01,620 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:01,621 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:01,621 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:01,621 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:01,622 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 430 states, 381 states have (on average 1.2703412073490814) internal successors, (484), 385 states have internal predecessors, (484), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:01,631 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 430 states to 430 states and 557 transitions. [2022-02-21 00:02:01,632 INFO L78 Accepts]: Start accepts. Automaton has 430 states and 557 transitions. Word has length 46 [2022-02-21 00:02:01,632 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:01,632 INFO L470 AbstractCegarLoop]: Abstraction has 430 states and 557 transitions. [2022-02-21 00:02:01,632 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.5) internal successors, (42), 3 states have internal predecessors, (42), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:01,632 INFO L276 IsEmpty]: Start isEmpty. Operand 430 states and 557 transitions. [2022-02-21 00:02:01,633 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-02-21 00:02:01,633 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:01,633 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:01,634 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable23 [2022-02-21 00:02:01,634 INFO L402 AbstractCegarLoop]: === Iteration 25 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:01,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:01,635 INFO L85 PathProgramCache]: Analyzing trace with hash -1973534822, now seen corresponding path program 1 times [2022-02-21 00:02:01,635 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:01,635 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2127975722] [2022-02-21 00:02:01,635 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:01,636 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:01,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:01,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-21 00:02:01,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:01,750 INFO L290 TraceCheckUtils]: 0: Hoare triple {47480#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {47459#true} is VALID [2022-02-21 00:02:01,750 INFO L290 TraceCheckUtils]: 1: Hoare triple {47459#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {47459#true} is VALID [2022-02-21 00:02:01,750 INFO L290 TraceCheckUtils]: 2: Hoare triple {47459#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {47459#true} is VALID [2022-02-21 00:02:01,750 INFO L290 TraceCheckUtils]: 3: Hoare triple {47459#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {47459#true} is VALID [2022-02-21 00:02:01,751 INFO L290 TraceCheckUtils]: 4: Hoare triple {47459#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {47459#true} is VALID [2022-02-21 00:02:01,751 INFO L290 TraceCheckUtils]: 5: Hoare triple {47459#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {47459#true} is VALID [2022-02-21 00:02:01,751 INFO L290 TraceCheckUtils]: 6: Hoare triple {47459#true} assume { :end_inline_stubMoreProcessingRequired } true; {47459#true} is VALID [2022-02-21 00:02:01,751 INFO L290 TraceCheckUtils]: 7: Hoare triple {47459#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {47459#true} is VALID [2022-02-21 00:02:01,751 INFO L290 TraceCheckUtils]: 8: Hoare triple {47459#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {47459#true} is VALID [2022-02-21 00:02:01,751 INFO L290 TraceCheckUtils]: 9: Hoare triple {47459#true} assume !(1 == ~tmp_ndt_8~0#1); {47459#true} is VALID [2022-02-21 00:02:01,752 INFO L290 TraceCheckUtils]: 10: Hoare triple {47459#true} ~returnVal2~0#1 := 259; {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,752 INFO L290 TraceCheckUtils]: 11: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume !(~s~0 == ~NP~0); {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,753 INFO L290 TraceCheckUtils]: 12: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume ~s~0 == ~MPR1~0; {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,753 INFO L290 TraceCheckUtils]: 13: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,753 INFO L290 TraceCheckUtils]: 14: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} #res#1 := ~returnVal2~0#1; {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:01,754 INFO L290 TraceCheckUtils]: 15: Hoare triple {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} assume true; {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:01,755 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} {47459#true} #787#return; {47478#(and (<= 259 |ULTIMATE.start_FloppyPnp_#t~ret43#1|) (<= |ULTIMATE.start_FloppyPnp_#t~ret43#1| 259))} is VALID [2022-02-21 00:02:01,755 INFO L290 TraceCheckUtils]: 0: Hoare triple {47459#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {47459#true} is VALID [2022-02-21 00:02:01,755 INFO L290 TraceCheckUtils]: 1: Hoare triple {47459#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {47459#true} is VALID [2022-02-21 00:02:01,755 INFO L290 TraceCheckUtils]: 2: Hoare triple {47459#true} assume { :end_inline__BLAST_init } true; {47459#true} is VALID [2022-02-21 00:02:01,755 INFO L290 TraceCheckUtils]: 3: Hoare triple {47459#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {47459#true} is VALID [2022-02-21 00:02:01,756 INFO L290 TraceCheckUtils]: 4: Hoare triple {47459#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {47459#true} is VALID [2022-02-21 00:02:01,756 INFO L290 TraceCheckUtils]: 5: Hoare triple {47459#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {47459#true} is VALID [2022-02-21 00:02:01,756 INFO L290 TraceCheckUtils]: 6: Hoare triple {47459#true} assume { :end_inline_stub_driver_init } true; {47459#true} is VALID [2022-02-21 00:02:01,756 INFO L290 TraceCheckUtils]: 7: Hoare triple {47459#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {47459#true} is VALID [2022-02-21 00:02:01,756 INFO L290 TraceCheckUtils]: 8: Hoare triple {47459#true} assume 3 == main_~tmp_ndt_1~0#1; {47459#true} is VALID [2022-02-21 00:02:01,756 INFO L290 TraceCheckUtils]: 9: Hoare triple {47459#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {47459#true} is VALID [2022-02-21 00:02:01,757 INFO L290 TraceCheckUtils]: 10: Hoare triple {47459#true} assume 1 == ~PagingReferenceCount~0; {47459#true} is VALID [2022-02-21 00:02:01,757 INFO L290 TraceCheckUtils]: 11: Hoare triple {47459#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {47459#true} is VALID [2022-02-21 00:02:01,757 INFO L290 TraceCheckUtils]: 12: Hoare triple {47459#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {47459#true} is VALID [2022-02-21 00:02:01,757 INFO L290 TraceCheckUtils]: 13: Hoare triple {47459#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {47459#true} is VALID [2022-02-21 00:02:01,757 INFO L290 TraceCheckUtils]: 14: Hoare triple {47459#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {47459#true} is VALID [2022-02-21 00:02:01,757 INFO L290 TraceCheckUtils]: 15: Hoare triple {47459#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {47459#true} is VALID [2022-02-21 00:02:01,757 INFO L290 TraceCheckUtils]: 16: Hoare triple {47459#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {47459#true} is VALID [2022-02-21 00:02:01,758 INFO L290 TraceCheckUtils]: 17: Hoare triple {47459#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {47459#true} is VALID [2022-02-21 00:02:01,758 INFO L290 TraceCheckUtils]: 18: Hoare triple {47459#true} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0;FloppyPnp_~irpSp___0~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~nextIrpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~nextIrpSp__Control~0#1 := 0; {47459#true} is VALID [2022-02-21 00:02:01,758 INFO L290 TraceCheckUtils]: 19: Hoare triple {47459#true} assume !(~s~0 != ~NP~0); {47459#true} is VALID [2022-02-21 00:02:01,758 INFO L290 TraceCheckUtils]: 20: Hoare triple {47459#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {47459#true} is VALID [2022-02-21 00:02:01,758 INFO L290 TraceCheckUtils]: 21: Hoare triple {47459#true} FloppyPnp_~irpSp___1~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~irpSp__Context~0#1 := FloppyPnp_~doneEvent~0#1;FloppyPnp_~irpSp__Control~0#1 := 224; {47459#true} is VALID [2022-02-21 00:02:01,759 INFO L272 TraceCheckUtils]: 22: Hoare triple {47459#true} call FloppyPnp_#t~ret43#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {47480#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:01,759 INFO L290 TraceCheckUtils]: 23: Hoare triple {47480#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {47459#true} is VALID [2022-02-21 00:02:01,759 INFO L290 TraceCheckUtils]: 24: Hoare triple {47459#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {47459#true} is VALID [2022-02-21 00:02:01,759 INFO L290 TraceCheckUtils]: 25: Hoare triple {47459#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {47459#true} is VALID [2022-02-21 00:02:01,760 INFO L290 TraceCheckUtils]: 26: Hoare triple {47459#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {47459#true} is VALID [2022-02-21 00:02:01,760 INFO L290 TraceCheckUtils]: 27: Hoare triple {47459#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {47459#true} is VALID [2022-02-21 00:02:01,760 INFO L290 TraceCheckUtils]: 28: Hoare triple {47459#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {47459#true} is VALID [2022-02-21 00:02:01,760 INFO L290 TraceCheckUtils]: 29: Hoare triple {47459#true} assume { :end_inline_stubMoreProcessingRequired } true; {47459#true} is VALID [2022-02-21 00:02:01,760 INFO L290 TraceCheckUtils]: 30: Hoare triple {47459#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {47459#true} is VALID [2022-02-21 00:02:01,760 INFO L290 TraceCheckUtils]: 31: Hoare triple {47459#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {47459#true} is VALID [2022-02-21 00:02:01,760 INFO L290 TraceCheckUtils]: 32: Hoare triple {47459#true} assume !(1 == ~tmp_ndt_8~0#1); {47459#true} is VALID [2022-02-21 00:02:01,761 INFO L290 TraceCheckUtils]: 33: Hoare triple {47459#true} ~returnVal2~0#1 := 259; {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,761 INFO L290 TraceCheckUtils]: 34: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume !(~s~0 == ~NP~0); {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,762 INFO L290 TraceCheckUtils]: 35: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume ~s~0 == ~MPR1~0; {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,762 INFO L290 TraceCheckUtils]: 36: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:01,762 INFO L290 TraceCheckUtils]: 37: Hoare triple {47481#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} #res#1 := ~returnVal2~0#1; {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:01,763 INFO L290 TraceCheckUtils]: 38: Hoare triple {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} assume true; {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:01,763 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {47482#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} {47459#true} #787#return; {47478#(and (<= 259 |ULTIMATE.start_FloppyPnp_#t~ret43#1|) (<= |ULTIMATE.start_FloppyPnp_#t~ret43#1| 259))} is VALID [2022-02-21 00:02:01,764 INFO L290 TraceCheckUtils]: 40: Hoare triple {47478#(and (<= 259 |ULTIMATE.start_FloppyPnp_#t~ret43#1|) (<= |ULTIMATE.start_FloppyPnp_#t~ret43#1| 259))} assume -2147483648 <= FloppyPnp_#t~ret43#1 && FloppyPnp_#t~ret43#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret43#1;havoc FloppyPnp_#t~ret43#1;FloppyPnp_~__cil_tmp30~0#1 := FloppyPnp_~ntStatus~0#1; {47479#(and (< 258 |ULTIMATE.start_FloppyPnp_~__cil_tmp30~0#1|) (<= |ULTIMATE.start_FloppyPnp_~__cil_tmp30~0#1| 259))} is VALID [2022-02-21 00:02:01,765 INFO L290 TraceCheckUtils]: 41: Hoare triple {47479#(and (< 258 |ULTIMATE.start_FloppyPnp_~__cil_tmp30~0#1|) (<= |ULTIMATE.start_FloppyPnp_~__cil_tmp30~0#1| 259))} assume !(259 == FloppyPnp_~__cil_tmp30~0#1); {47460#false} is VALID [2022-02-21 00:02:01,765 INFO L290 TraceCheckUtils]: 42: Hoare triple {47460#false} FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := FloppyPnp_~ntStatus~0#1;~myStatus~0 := FloppyPnp_~ntStatus~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0; {47460#false} is VALID [2022-02-21 00:02:01,765 INFO L272 TraceCheckUtils]: 43: Hoare triple {47460#false} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {47460#false} is VALID [2022-02-21 00:02:01,765 INFO L290 TraceCheckUtils]: 44: Hoare triple {47460#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {47460#false} is VALID [2022-02-21 00:02:01,765 INFO L290 TraceCheckUtils]: 45: Hoare triple {47460#false} assume !(~s~0 == ~NP~0); {47460#false} is VALID [2022-02-21 00:02:01,765 INFO L272 TraceCheckUtils]: 46: Hoare triple {47460#false} call errorFn(); {47460#false} is VALID [2022-02-21 00:02:01,765 INFO L290 TraceCheckUtils]: 47: Hoare triple {47460#false} assume !false; {47460#false} is VALID [2022-02-21 00:02:01,766 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:01,766 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:01,766 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2127975722] [2022-02-21 00:02:01,766 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2127975722] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:01,766 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:01,766 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-21 00:02:01,767 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1856382774] [2022-02-21 00:02:01,767 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:01,767 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 48 [2022-02-21 00:02:01,767 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:01,768 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:01,812 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:01,812 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-21 00:02:01,812 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:01,812 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-21 00:02:01,813 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-21 00:02:01,813 INFO L87 Difference]: Start difference. First operand 430 states and 557 transitions. Second operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:02,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:02,937 INFO L93 Difference]: Finished difference Result 471 states and 604 transitions. [2022-02-21 00:02:02,937 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-21 00:02:02,938 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 48 [2022-02-21 00:02:02,938 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:02,938 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:02,940 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 334 transitions. [2022-02-21 00:02:02,940 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:02,942 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 334 transitions. [2022-02-21 00:02:02,942 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 334 transitions. [2022-02-21 00:02:03,198 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 334 edges. 334 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:03,209 INFO L225 Difference]: With dead ends: 471 [2022-02-21 00:02:03,209 INFO L226 Difference]: Without dead ends: 471 [2022-02-21 00:02:03,209 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:03,210 INFO L933 BasicCegarLoop]: 306 mSDtfsCounter, 52 mSDsluCounter, 1312 mSDsCounter, 0 mSdLazyCounter, 234 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 54 SdHoareTripleChecker+Valid, 1618 SdHoareTripleChecker+Invalid, 256 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 234 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:03,210 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [54 Valid, 1618 Invalid, 256 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 234 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:02:03,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 471 states. [2022-02-21 00:02:03,216 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 471 to 430. [2022-02-21 00:02:03,216 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:03,217 INFO L82 GeneralOperation]: Start isEquivalent. First operand 471 states. Second operand has 430 states, 381 states have (on average 1.2650918635170603) internal successors, (482), 385 states have internal predecessors, (482), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:03,217 INFO L74 IsIncluded]: Start isIncluded. First operand 471 states. Second operand has 430 states, 381 states have (on average 1.2650918635170603) internal successors, (482), 385 states have internal predecessors, (482), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:03,218 INFO L87 Difference]: Start difference. First operand 471 states. Second operand has 430 states, 381 states have (on average 1.2650918635170603) internal successors, (482), 385 states have internal predecessors, (482), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:03,229 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:03,229 INFO L93 Difference]: Finished difference Result 471 states and 604 transitions. [2022-02-21 00:02:03,229 INFO L276 IsEmpty]: Start isEmpty. Operand 471 states and 604 transitions. [2022-02-21 00:02:03,230 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:03,230 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:03,231 INFO L74 IsIncluded]: Start isIncluded. First operand has 430 states, 381 states have (on average 1.2650918635170603) internal successors, (482), 385 states have internal predecessors, (482), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) Second operand 471 states. [2022-02-21 00:02:03,232 INFO L87 Difference]: Start difference. First operand has 430 states, 381 states have (on average 1.2650918635170603) internal successors, (482), 385 states have internal predecessors, (482), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) Second operand 471 states. [2022-02-21 00:02:03,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:03,243 INFO L93 Difference]: Finished difference Result 471 states and 604 transitions. [2022-02-21 00:02:03,243 INFO L276 IsEmpty]: Start isEmpty. Operand 471 states and 604 transitions. [2022-02-21 00:02:03,252 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:03,252 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:03,253 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:03,253 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:03,253 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 430 states, 381 states have (on average 1.2650918635170603) internal successors, (482), 385 states have internal predecessors, (482), 32 states have call successors, (32), 16 states have call predecessors, (32), 16 states have return successors, (41), 29 states have call predecessors, (41), 28 states have call successors, (41) [2022-02-21 00:02:03,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 430 states to 430 states and 555 transitions. [2022-02-21 00:02:03,263 INFO L78 Accepts]: Start accepts. Automaton has 430 states and 555 transitions. Word has length 48 [2022-02-21 00:02:03,263 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:03,263 INFO L470 AbstractCegarLoop]: Abstraction has 430 states and 555 transitions. [2022-02-21 00:02:03,263 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.285714285714286) internal successors, (44), 5 states have internal predecessors, (44), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:03,263 INFO L276 IsEmpty]: Start isEmpty. Operand 430 states and 555 transitions. [2022-02-21 00:02:03,266 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 49 [2022-02-21 00:02:03,266 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:03,266 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:03,266 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable24 [2022-02-21 00:02:03,266 INFO L402 AbstractCegarLoop]: === Iteration 26 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:03,267 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:03,267 INFO L85 PathProgramCache]: Analyzing trace with hash 1518352747, now seen corresponding path program 1 times [2022-02-21 00:02:03,267 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:03,267 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [160803246] [2022-02-21 00:02:03,267 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:03,268 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:03,288 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:03,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-02-21 00:02:03,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:03,341 INFO L290 TraceCheckUtils]: 0: Hoare triple {49349#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {49332#true} is VALID [2022-02-21 00:02:03,341 INFO L290 TraceCheckUtils]: 1: Hoare triple {49332#true} assume !(0 != ~compRegistered~0); {49332#true} is VALID [2022-02-21 00:02:03,341 INFO L290 TraceCheckUtils]: 2: Hoare triple {49332#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {49332#true} is VALID [2022-02-21 00:02:03,342 INFO L290 TraceCheckUtils]: 3: Hoare triple {49332#true} assume 0 == ~tmp_ndt_7~0#1; {49332#true} is VALID [2022-02-21 00:02:03,342 INFO L290 TraceCheckUtils]: 4: Hoare triple {49332#true} ~returnVal2~0#1 := 0; {49332#true} is VALID [2022-02-21 00:02:03,342 INFO L290 TraceCheckUtils]: 5: Hoare triple {49332#true} assume !(~s~0 == ~NP~0); {49332#true} is VALID [2022-02-21 00:02:03,342 INFO L290 TraceCheckUtils]: 6: Hoare triple {49332#true} assume !(~s~0 == ~MPR1~0); {49332#true} is VALID [2022-02-21 00:02:03,342 INFO L290 TraceCheckUtils]: 7: Hoare triple {49332#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {49350#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:03,343 INFO L290 TraceCheckUtils]: 8: Hoare triple {49350#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:03,343 INFO L290 TraceCheckUtils]: 9: Hoare triple {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:03,344 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {49332#true} #781#return; {49345#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret42#1|)} is VALID [2022-02-21 00:02:03,344 INFO L290 TraceCheckUtils]: 0: Hoare triple {49332#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {49332#true} is VALID [2022-02-21 00:02:03,344 INFO L290 TraceCheckUtils]: 1: Hoare triple {49332#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {49332#true} is VALID [2022-02-21 00:02:03,344 INFO L290 TraceCheckUtils]: 2: Hoare triple {49332#true} assume { :end_inline__BLAST_init } true; {49332#true} is VALID [2022-02-21 00:02:03,345 INFO L290 TraceCheckUtils]: 3: Hoare triple {49332#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {49332#true} is VALID [2022-02-21 00:02:03,345 INFO L290 TraceCheckUtils]: 4: Hoare triple {49332#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {49332#true} is VALID [2022-02-21 00:02:03,345 INFO L290 TraceCheckUtils]: 5: Hoare triple {49332#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {49332#true} is VALID [2022-02-21 00:02:03,345 INFO L290 TraceCheckUtils]: 6: Hoare triple {49332#true} assume { :end_inline_stub_driver_init } true; {49332#true} is VALID [2022-02-21 00:02:03,345 INFO L290 TraceCheckUtils]: 7: Hoare triple {49332#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {49332#true} is VALID [2022-02-21 00:02:03,345 INFO L290 TraceCheckUtils]: 8: Hoare triple {49332#true} assume 3 == main_~tmp_ndt_1~0#1; {49332#true} is VALID [2022-02-21 00:02:03,345 INFO L290 TraceCheckUtils]: 9: Hoare triple {49332#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {49332#true} is VALID [2022-02-21 00:02:03,346 INFO L290 TraceCheckUtils]: 10: Hoare triple {49332#true} assume 1 == ~PagingReferenceCount~0; {49332#true} is VALID [2022-02-21 00:02:03,346 INFO L290 TraceCheckUtils]: 11: Hoare triple {49332#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {49332#true} is VALID [2022-02-21 00:02:03,346 INFO L290 TraceCheckUtils]: 12: Hoare triple {49332#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {49332#true} is VALID [2022-02-21 00:02:03,346 INFO L290 TraceCheckUtils]: 13: Hoare triple {49332#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {49332#true} is VALID [2022-02-21 00:02:03,346 INFO L290 TraceCheckUtils]: 14: Hoare triple {49332#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {49332#true} is VALID [2022-02-21 00:02:03,346 INFO L290 TraceCheckUtils]: 15: Hoare triple {49332#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {49332#true} is VALID [2022-02-21 00:02:03,347 INFO L290 TraceCheckUtils]: 16: Hoare triple {49332#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {49332#true} is VALID [2022-02-21 00:02:03,347 INFO L290 TraceCheckUtils]: 17: Hoare triple {49332#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {49332#true} is VALID [2022-02-21 00:02:03,347 INFO L290 TraceCheckUtils]: 18: Hoare triple {49332#true} assume 0 == FloppyPnp_~disketteExtension__IsStarted~0#1;FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0; {49332#true} is VALID [2022-02-21 00:02:03,347 INFO L290 TraceCheckUtils]: 19: Hoare triple {49332#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {49332#true} is VALID [2022-02-21 00:02:03,347 INFO L290 TraceCheckUtils]: 20: Hoare triple {49332#true} FloppyPnp_#t~post40#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post40#1;havoc FloppyPnp_#t~post40#1;FloppyPnp_#t~post41#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post41#1;havoc FloppyPnp_#t~post41#1; {49332#true} is VALID [2022-02-21 00:02:03,348 INFO L272 TraceCheckUtils]: 21: Hoare triple {49332#true} call FloppyPnp_#t~ret42#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {49349#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:03,348 INFO L290 TraceCheckUtils]: 22: Hoare triple {49349#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {49332#true} is VALID [2022-02-21 00:02:03,348 INFO L290 TraceCheckUtils]: 23: Hoare triple {49332#true} assume !(0 != ~compRegistered~0); {49332#true} is VALID [2022-02-21 00:02:03,348 INFO L290 TraceCheckUtils]: 24: Hoare triple {49332#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {49332#true} is VALID [2022-02-21 00:02:03,348 INFO L290 TraceCheckUtils]: 25: Hoare triple {49332#true} assume 0 == ~tmp_ndt_7~0#1; {49332#true} is VALID [2022-02-21 00:02:03,349 INFO L290 TraceCheckUtils]: 26: Hoare triple {49332#true} ~returnVal2~0#1 := 0; {49332#true} is VALID [2022-02-21 00:02:03,349 INFO L290 TraceCheckUtils]: 27: Hoare triple {49332#true} assume !(~s~0 == ~NP~0); {49332#true} is VALID [2022-02-21 00:02:03,349 INFO L290 TraceCheckUtils]: 28: Hoare triple {49332#true} assume !(~s~0 == ~MPR1~0); {49332#true} is VALID [2022-02-21 00:02:03,349 INFO L290 TraceCheckUtils]: 29: Hoare triple {49332#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {49350#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:03,350 INFO L290 TraceCheckUtils]: 30: Hoare triple {49350#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:03,350 INFO L290 TraceCheckUtils]: 31: Hoare triple {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:03,351 INFO L284 TraceCheckUtils]: 32: Hoare quadruple {49351#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {49332#true} #781#return; {49345#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret42#1|)} is VALID [2022-02-21 00:02:03,351 INFO L290 TraceCheckUtils]: 33: Hoare triple {49345#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret42#1|)} assume -2147483648 <= FloppyPnp_#t~ret42#1 && FloppyPnp_#t~ret42#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret42#1;havoc FloppyPnp_#t~ret42#1; {49346#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,351 INFO L290 TraceCheckUtils]: 34: Hoare triple {49346#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {49346#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,352 INFO L290 TraceCheckUtils]: 35: Hoare triple {49346#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} assume 0 == ~PagingReferenceCount~0; {49346#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,352 INFO L290 TraceCheckUtils]: 36: Hoare triple {49346#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {49347#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} is VALID [2022-02-21 00:02:03,353 INFO L290 TraceCheckUtils]: 37: Hoare triple {49347#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,353 INFO L290 TraceCheckUtils]: 38: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,353 INFO L290 TraceCheckUtils]: 39: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,354 INFO L290 TraceCheckUtils]: 40: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,354 INFO L290 TraceCheckUtils]: 41: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume -1 != main_~status~1#1; {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,354 INFO L290 TraceCheckUtils]: 42: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,355 INFO L290 TraceCheckUtils]: 43: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,355 INFO L290 TraceCheckUtils]: 44: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:03,355 INFO L290 TraceCheckUtils]: 45: Hoare triple {49348#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume main_~status~1#1 != ~lowerDriverReturn~0; {49333#false} is VALID [2022-02-21 00:02:03,355 INFO L272 TraceCheckUtils]: 46: Hoare triple {49333#false} call errorFn(); {49333#false} is VALID [2022-02-21 00:02:03,356 INFO L290 TraceCheckUtils]: 47: Hoare triple {49333#false} assume !false; {49333#false} is VALID [2022-02-21 00:02:03,356 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:03,356 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:03,356 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [160803246] [2022-02-21 00:02:03,356 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [160803246] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:03,356 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:03,356 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-02-21 00:02:03,356 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [656619747] [2022-02-21 00:02:03,356 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:03,357 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 48 [2022-02-21 00:02:03,357 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:03,357 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:03,386 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 48 edges. 48 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:03,386 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-21 00:02:03,386 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:03,386 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-21 00:02:03,386 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:03,386 INFO L87 Difference]: Start difference. First operand 430 states and 555 transitions. Second operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:04,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:04,564 INFO L93 Difference]: Finished difference Result 454 states and 581 transitions. [2022-02-21 00:02:04,564 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-21 00:02:04,564 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 48 [2022-02-21 00:02:04,564 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:04,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:04,566 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 309 transitions. [2022-02-21 00:02:04,566 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:04,567 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 309 transitions. [2022-02-21 00:02:04,567 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 309 transitions. [2022-02-21 00:02:04,758 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 309 edges. 309 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:04,764 INFO L225 Difference]: With dead ends: 454 [2022-02-21 00:02:04,764 INFO L226 Difference]: Without dead ends: 438 [2022-02-21 00:02:04,764 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2022-02-21 00:02:04,765 INFO L933 BasicCegarLoop]: 272 mSDtfsCounter, 53 mSDsluCounter, 1572 mSDsCounter, 0 mSdLazyCounter, 398 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 1844 SdHoareTripleChecker+Invalid, 420 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 398 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:04,765 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [53 Valid, 1844 Invalid, 420 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 398 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:02:04,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 438 states. [2022-02-21 00:02:04,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 438 to 426. [2022-02-21 00:02:04,771 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:04,772 INFO L82 GeneralOperation]: Start isEquivalent. First operand 438 states. Second operand has 426 states, 378 states have (on average 1.2645502645502646) internal successors, (478), 382 states have internal predecessors, (478), 31 states have call successors, (31), 16 states have call predecessors, (31), 16 states have return successors, (40), 28 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:02:04,772 INFO L74 IsIncluded]: Start isIncluded. First operand 438 states. Second operand has 426 states, 378 states have (on average 1.2645502645502646) internal successors, (478), 382 states have internal predecessors, (478), 31 states have call successors, (31), 16 states have call predecessors, (31), 16 states have return successors, (40), 28 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:02:04,773 INFO L87 Difference]: Start difference. First operand 438 states. Second operand has 426 states, 378 states have (on average 1.2645502645502646) internal successors, (478), 382 states have internal predecessors, (478), 31 states have call successors, (31), 16 states have call predecessors, (31), 16 states have return successors, (40), 28 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:02:04,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:04,783 INFO L93 Difference]: Finished difference Result 438 states and 563 transitions. [2022-02-21 00:02:04,783 INFO L276 IsEmpty]: Start isEmpty. Operand 438 states and 563 transitions. [2022-02-21 00:02:04,784 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:04,784 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:04,785 INFO L74 IsIncluded]: Start isIncluded. First operand has 426 states, 378 states have (on average 1.2645502645502646) internal successors, (478), 382 states have internal predecessors, (478), 31 states have call successors, (31), 16 states have call predecessors, (31), 16 states have return successors, (40), 28 states have call predecessors, (40), 27 states have call successors, (40) Second operand 438 states. [2022-02-21 00:02:04,785 INFO L87 Difference]: Start difference. First operand has 426 states, 378 states have (on average 1.2645502645502646) internal successors, (478), 382 states have internal predecessors, (478), 31 states have call successors, (31), 16 states have call predecessors, (31), 16 states have return successors, (40), 28 states have call predecessors, (40), 27 states have call successors, (40) Second operand 438 states. [2022-02-21 00:02:04,795 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:04,795 INFO L93 Difference]: Finished difference Result 438 states and 563 transitions. [2022-02-21 00:02:04,795 INFO L276 IsEmpty]: Start isEmpty. Operand 438 states and 563 transitions. [2022-02-21 00:02:04,796 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:04,796 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:04,796 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:04,796 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:04,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 426 states, 378 states have (on average 1.2645502645502646) internal successors, (478), 382 states have internal predecessors, (478), 31 states have call successors, (31), 16 states have call predecessors, (31), 16 states have return successors, (40), 28 states have call predecessors, (40), 27 states have call successors, (40) [2022-02-21 00:02:04,806 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 426 states to 426 states and 549 transitions. [2022-02-21 00:02:04,807 INFO L78 Accepts]: Start accepts. Automaton has 426 states and 549 transitions. Word has length 48 [2022-02-21 00:02:04,807 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:04,807 INFO L470 AbstractCegarLoop]: Abstraction has 426 states and 549 transitions. [2022-02-21 00:02:04,807 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.0) internal successors, (45), 7 states have internal predecessors, (45), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:04,807 INFO L276 IsEmpty]: Start isEmpty. Operand 426 states and 549 transitions. [2022-02-21 00:02:04,808 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-02-21 00:02:04,808 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:04,808 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:04,808 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable25 [2022-02-21 00:02:04,808 INFO L402 AbstractCegarLoop]: === Iteration 27 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:04,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:04,809 INFO L85 PathProgramCache]: Analyzing trace with hash 882823039, now seen corresponding path program 1 times [2022-02-21 00:02:04,809 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:04,809 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1564818743] [2022-02-21 00:02:04,809 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:04,809 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:04,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:04,859 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-21 00:02:04,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:04,876 INFO L290 TraceCheckUtils]: 0: Hoare triple {51133#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {51116#true} is VALID [2022-02-21 00:02:04,876 INFO L290 TraceCheckUtils]: 1: Hoare triple {51116#true} assume !(0 != ~compRegistered~0); {51116#true} is VALID [2022-02-21 00:02:04,876 INFO L290 TraceCheckUtils]: 2: Hoare triple {51116#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {51116#true} is VALID [2022-02-21 00:02:04,876 INFO L290 TraceCheckUtils]: 3: Hoare triple {51116#true} assume 0 == ~tmp_ndt_7~0#1; {51116#true} is VALID [2022-02-21 00:02:04,876 INFO L290 TraceCheckUtils]: 4: Hoare triple {51116#true} ~returnVal2~0#1 := 0; {51116#true} is VALID [2022-02-21 00:02:04,876 INFO L290 TraceCheckUtils]: 5: Hoare triple {51116#true} assume !(~s~0 == ~NP~0); {51116#true} is VALID [2022-02-21 00:02:04,876 INFO L290 TraceCheckUtils]: 6: Hoare triple {51116#true} assume !(~s~0 == ~MPR1~0); {51116#true} is VALID [2022-02-21 00:02:04,877 INFO L290 TraceCheckUtils]: 7: Hoare triple {51116#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {51134#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:04,877 INFO L290 TraceCheckUtils]: 8: Hoare triple {51134#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:04,877 INFO L290 TraceCheckUtils]: 9: Hoare triple {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:04,878 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {51116#true} #795#return; {51129#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret47#1|)} is VALID [2022-02-21 00:02:04,878 INFO L290 TraceCheckUtils]: 0: Hoare triple {51116#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {51116#true} is VALID [2022-02-21 00:02:04,878 INFO L290 TraceCheckUtils]: 1: Hoare triple {51116#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {51116#true} is VALID [2022-02-21 00:02:04,878 INFO L290 TraceCheckUtils]: 2: Hoare triple {51116#true} assume { :end_inline__BLAST_init } true; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 3: Hoare triple {51116#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 4: Hoare triple {51116#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 5: Hoare triple {51116#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 6: Hoare triple {51116#true} assume { :end_inline_stub_driver_init } true; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 7: Hoare triple {51116#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 8: Hoare triple {51116#true} assume 3 == main_~tmp_ndt_1~0#1; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 9: Hoare triple {51116#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 10: Hoare triple {51116#true} assume 1 == ~PagingReferenceCount~0; {51116#true} is VALID [2022-02-21 00:02:04,879 INFO L290 TraceCheckUtils]: 11: Hoare triple {51116#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 12: Hoare triple {51116#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 13: Hoare triple {51116#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 14: Hoare triple {51116#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 15: Hoare triple {51116#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 16: Hoare triple {51116#true} assume !(6 == FloppyPnp_~irpSp__MinorFunction~0#1); {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 17: Hoare triple {51116#true} assume !(3 == FloppyPnp_~irpSp__MinorFunction~0#1); {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 18: Hoare triple {51116#true} assume 4 == FloppyPnp_~irpSp__MinorFunction~0#1; {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 19: Hoare triple {51116#true} FloppyPnp_~disketteExtension__IsStarted~0#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0; {51116#true} is VALID [2022-02-21 00:02:04,880 INFO L290 TraceCheckUtils]: 20: Hoare triple {51116#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {51116#true} is VALID [2022-02-21 00:02:04,881 INFO L290 TraceCheckUtils]: 21: Hoare triple {51116#true} FloppyPnp_#t~post45#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post45#1;havoc FloppyPnp_#t~post45#1;FloppyPnp_#t~post46#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post46#1;havoc FloppyPnp_#t~post46#1; {51116#true} is VALID [2022-02-21 00:02:04,883 INFO L272 TraceCheckUtils]: 22: Hoare triple {51116#true} call FloppyPnp_#t~ret47#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {51133#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 23: Hoare triple {51133#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {51116#true} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 24: Hoare triple {51116#true} assume !(0 != ~compRegistered~0); {51116#true} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 25: Hoare triple {51116#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {51116#true} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 26: Hoare triple {51116#true} assume 0 == ~tmp_ndt_7~0#1; {51116#true} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 27: Hoare triple {51116#true} ~returnVal2~0#1 := 0; {51116#true} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 28: Hoare triple {51116#true} assume !(~s~0 == ~NP~0); {51116#true} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 29: Hoare triple {51116#true} assume !(~s~0 == ~MPR1~0); {51116#true} is VALID [2022-02-21 00:02:04,884 INFO L290 TraceCheckUtils]: 30: Hoare triple {51116#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {51134#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:04,885 INFO L290 TraceCheckUtils]: 31: Hoare triple {51134#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:04,885 INFO L290 TraceCheckUtils]: 32: Hoare triple {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:04,886 INFO L284 TraceCheckUtils]: 33: Hoare quadruple {51135#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {51116#true} #795#return; {51129#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret47#1|)} is VALID [2022-02-21 00:02:04,886 INFO L290 TraceCheckUtils]: 34: Hoare triple {51129#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret47#1|)} assume -2147483648 <= FloppyPnp_#t~ret47#1 && FloppyPnp_#t~ret47#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret47#1;havoc FloppyPnp_#t~ret47#1; {51130#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,886 INFO L290 TraceCheckUtils]: 35: Hoare triple {51130#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {51130#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,887 INFO L290 TraceCheckUtils]: 36: Hoare triple {51130#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} assume 0 == ~PagingReferenceCount~0; {51130#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,887 INFO L290 TraceCheckUtils]: 37: Hoare triple {51130#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {51131#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} is VALID [2022-02-21 00:02:04,887 INFO L290 TraceCheckUtils]: 38: Hoare triple {51131#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,888 INFO L290 TraceCheckUtils]: 39: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,888 INFO L290 TraceCheckUtils]: 40: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,888 INFO L290 TraceCheckUtils]: 41: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,889 INFO L290 TraceCheckUtils]: 42: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume -1 != main_~status~1#1; {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,889 INFO L290 TraceCheckUtils]: 43: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,889 INFO L290 TraceCheckUtils]: 44: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,890 INFO L290 TraceCheckUtils]: 45: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:04,890 INFO L290 TraceCheckUtils]: 46: Hoare triple {51132#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume main_~status~1#1 != ~lowerDriverReturn~0; {51117#false} is VALID [2022-02-21 00:02:04,890 INFO L272 TraceCheckUtils]: 47: Hoare triple {51117#false} call errorFn(); {51117#false} is VALID [2022-02-21 00:02:04,890 INFO L290 TraceCheckUtils]: 48: Hoare triple {51117#false} assume !false; {51117#false} is VALID [2022-02-21 00:02:04,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:04,890 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:04,891 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1564818743] [2022-02-21 00:02:04,891 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1564818743] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:04,891 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:04,891 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-02-21 00:02:04,891 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [661277793] [2022-02-21 00:02:04,891 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:04,891 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 49 [2022-02-21 00:02:04,892 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:04,892 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:04,922 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:04,922 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-21 00:02:04,922 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:04,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-21 00:02:04,923 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:04,923 INFO L87 Difference]: Start difference. First operand 426 states and 549 transitions. Second operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:06,233 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:06,233 INFO L93 Difference]: Finished difference Result 450 states and 575 transitions. [2022-02-21 00:02:06,233 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-21 00:02:06,233 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 49 [2022-02-21 00:02:06,233 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:06,234 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:06,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 303 transitions. [2022-02-21 00:02:06,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:06,237 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 303 transitions. [2022-02-21 00:02:06,237 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 303 transitions. [2022-02-21 00:02:06,427 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 303 edges. 303 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:06,434 INFO L225 Difference]: With dead ends: 450 [2022-02-21 00:02:06,434 INFO L226 Difference]: Without dead ends: 433 [2022-02-21 00:02:06,435 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2022-02-21 00:02:06,436 INFO L933 BasicCegarLoop]: 266 mSDtfsCounter, 53 mSDsluCounter, 1540 mSDsCounter, 0 mSdLazyCounter, 389 mSolverCounterSat, 21 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 1806 SdHoareTripleChecker+Invalid, 410 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 21 IncrementalHoareTripleChecker+Valid, 389 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:06,437 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [53 Valid, 1806 Invalid, 410 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [21 Valid, 389 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:02:06,438 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433 states. [2022-02-21 00:02:06,445 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433 to 421. [2022-02-21 00:02:06,445 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:06,446 INFO L82 GeneralOperation]: Start isEquivalent. First operand 433 states. Second operand has 421 states, 374 states have (on average 1.2647058823529411) internal successors, (473), 378 states have internal predecessors, (473), 30 states have call successors, (30), 16 states have call predecessors, (30), 16 states have return successors, (39), 27 states have call predecessors, (39), 26 states have call successors, (39) [2022-02-21 00:02:06,446 INFO L74 IsIncluded]: Start isIncluded. First operand 433 states. Second operand has 421 states, 374 states have (on average 1.2647058823529411) internal successors, (473), 378 states have internal predecessors, (473), 30 states have call successors, (30), 16 states have call predecessors, (30), 16 states have return successors, (39), 27 states have call predecessors, (39), 26 states have call successors, (39) [2022-02-21 00:02:06,447 INFO L87 Difference]: Start difference. First operand 433 states. Second operand has 421 states, 374 states have (on average 1.2647058823529411) internal successors, (473), 378 states have internal predecessors, (473), 30 states have call successors, (30), 16 states have call predecessors, (30), 16 states have return successors, (39), 27 states have call predecessors, (39), 26 states have call successors, (39) [2022-02-21 00:02:06,457 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:06,457 INFO L93 Difference]: Finished difference Result 433 states and 556 transitions. [2022-02-21 00:02:06,457 INFO L276 IsEmpty]: Start isEmpty. Operand 433 states and 556 transitions. [2022-02-21 00:02:06,458 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:06,458 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:06,459 INFO L74 IsIncluded]: Start isIncluded. First operand has 421 states, 374 states have (on average 1.2647058823529411) internal successors, (473), 378 states have internal predecessors, (473), 30 states have call successors, (30), 16 states have call predecessors, (30), 16 states have return successors, (39), 27 states have call predecessors, (39), 26 states have call successors, (39) Second operand 433 states. [2022-02-21 00:02:06,460 INFO L87 Difference]: Start difference. First operand has 421 states, 374 states have (on average 1.2647058823529411) internal successors, (473), 378 states have internal predecessors, (473), 30 states have call successors, (30), 16 states have call predecessors, (30), 16 states have return successors, (39), 27 states have call predecessors, (39), 26 states have call successors, (39) Second operand 433 states. [2022-02-21 00:02:06,470 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:06,470 INFO L93 Difference]: Finished difference Result 433 states and 556 transitions. [2022-02-21 00:02:06,470 INFO L276 IsEmpty]: Start isEmpty. Operand 433 states and 556 transitions. [2022-02-21 00:02:06,471 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:06,471 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:06,471 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:06,471 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:06,472 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 421 states, 374 states have (on average 1.2647058823529411) internal successors, (473), 378 states have internal predecessors, (473), 30 states have call successors, (30), 16 states have call predecessors, (30), 16 states have return successors, (39), 27 states have call predecessors, (39), 26 states have call successors, (39) [2022-02-21 00:02:06,481 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 421 states to 421 states and 542 transitions. [2022-02-21 00:02:06,482 INFO L78 Accepts]: Start accepts. Automaton has 421 states and 542 transitions. Word has length 49 [2022-02-21 00:02:06,482 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:06,482 INFO L470 AbstractCegarLoop]: Abstraction has 421 states and 542 transitions. [2022-02-21 00:02:06,482 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:06,482 INFO L276 IsEmpty]: Start isEmpty. Operand 421 states and 542 transitions. [2022-02-21 00:02:06,483 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 50 [2022-02-21 00:02:06,483 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:06,483 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:06,484 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable26 [2022-02-21 00:02:06,484 INFO L402 AbstractCegarLoop]: === Iteration 28 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:06,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:06,484 INFO L85 PathProgramCache]: Analyzing trace with hash 163830842, now seen corresponding path program 1 times [2022-02-21 00:02:06,484 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:06,485 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [109137383] [2022-02-21 00:02:06,485 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:06,485 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:06,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:06,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-21 00:02:06,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:06,565 INFO L290 TraceCheckUtils]: 0: Hoare triple {52898#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {52881#true} is VALID [2022-02-21 00:02:06,565 INFO L290 TraceCheckUtils]: 1: Hoare triple {52881#true} assume !(0 != ~compRegistered~0); {52881#true} is VALID [2022-02-21 00:02:06,565 INFO L290 TraceCheckUtils]: 2: Hoare triple {52881#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {52881#true} is VALID [2022-02-21 00:02:06,565 INFO L290 TraceCheckUtils]: 3: Hoare triple {52881#true} assume 0 == ~tmp_ndt_7~0#1; {52881#true} is VALID [2022-02-21 00:02:06,565 INFO L290 TraceCheckUtils]: 4: Hoare triple {52881#true} ~returnVal2~0#1 := 0; {52881#true} is VALID [2022-02-21 00:02:06,566 INFO L290 TraceCheckUtils]: 5: Hoare triple {52881#true} assume !(~s~0 == ~NP~0); {52881#true} is VALID [2022-02-21 00:02:06,566 INFO L290 TraceCheckUtils]: 6: Hoare triple {52881#true} assume !(~s~0 == ~MPR1~0); {52881#true} is VALID [2022-02-21 00:02:06,566 INFO L290 TraceCheckUtils]: 7: Hoare triple {52881#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {52899#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:06,566 INFO L290 TraceCheckUtils]: 8: Hoare triple {52899#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:06,567 INFO L290 TraceCheckUtils]: 9: Hoare triple {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:06,568 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {52881#true} #805#return; {52894#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret56#1|)} is VALID [2022-02-21 00:02:06,568 INFO L290 TraceCheckUtils]: 0: Hoare triple {52881#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {52881#true} is VALID [2022-02-21 00:02:06,568 INFO L290 TraceCheckUtils]: 1: Hoare triple {52881#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {52881#true} is VALID [2022-02-21 00:02:06,568 INFO L290 TraceCheckUtils]: 2: Hoare triple {52881#true} assume { :end_inline__BLAST_init } true; {52881#true} is VALID [2022-02-21 00:02:06,568 INFO L290 TraceCheckUtils]: 3: Hoare triple {52881#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {52881#true} is VALID [2022-02-21 00:02:06,568 INFO L290 TraceCheckUtils]: 4: Hoare triple {52881#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {52881#true} is VALID [2022-02-21 00:02:06,569 INFO L290 TraceCheckUtils]: 5: Hoare triple {52881#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {52881#true} is VALID [2022-02-21 00:02:06,569 INFO L290 TraceCheckUtils]: 6: Hoare triple {52881#true} assume { :end_inline_stub_driver_init } true; {52881#true} is VALID [2022-02-21 00:02:06,569 INFO L290 TraceCheckUtils]: 7: Hoare triple {52881#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {52881#true} is VALID [2022-02-21 00:02:06,569 INFO L290 TraceCheckUtils]: 8: Hoare triple {52881#true} assume 3 == main_~tmp_ndt_1~0#1; {52881#true} is VALID [2022-02-21 00:02:06,569 INFO L290 TraceCheckUtils]: 9: Hoare triple {52881#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {52881#true} is VALID [2022-02-21 00:02:06,569 INFO L290 TraceCheckUtils]: 10: Hoare triple {52881#true} assume 1 == ~PagingReferenceCount~0; {52881#true} is VALID [2022-02-21 00:02:06,569 INFO L290 TraceCheckUtils]: 11: Hoare triple {52881#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {52881#true} is VALID [2022-02-21 00:02:06,570 INFO L290 TraceCheckUtils]: 12: Hoare triple {52881#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {52881#true} is VALID [2022-02-21 00:02:06,570 INFO L290 TraceCheckUtils]: 13: Hoare triple {52881#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {52881#true} is VALID [2022-02-21 00:02:06,570 INFO L290 TraceCheckUtils]: 14: Hoare triple {52881#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {52881#true} is VALID [2022-02-21 00:02:06,570 INFO L290 TraceCheckUtils]: 15: Hoare triple {52881#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {52881#true} is VALID [2022-02-21 00:02:06,570 INFO L290 TraceCheckUtils]: 16: Hoare triple {52881#true} assume !(6 == FloppyPnp_~irpSp__MinorFunction~0#1); {52881#true} is VALID [2022-02-21 00:02:06,570 INFO L290 TraceCheckUtils]: 17: Hoare triple {52881#true} assume !(3 == FloppyPnp_~irpSp__MinorFunction~0#1); {52881#true} is VALID [2022-02-21 00:02:06,570 INFO L290 TraceCheckUtils]: 18: Hoare triple {52881#true} assume !(4 == FloppyPnp_~irpSp__MinorFunction~0#1); {52881#true} is VALID [2022-02-21 00:02:06,571 INFO L290 TraceCheckUtils]: 19: Hoare triple {52881#true} assume !(2 == FloppyPnp_~irpSp__MinorFunction~0#1); {52881#true} is VALID [2022-02-21 00:02:06,571 INFO L290 TraceCheckUtils]: 20: Hoare triple {52881#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {52881#true} is VALID [2022-02-21 00:02:06,571 INFO L290 TraceCheckUtils]: 21: Hoare triple {52881#true} FloppyPnp_#t~post54#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post54#1;havoc FloppyPnp_#t~post54#1;FloppyPnp_#t~post55#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post55#1;havoc FloppyPnp_#t~post55#1; {52881#true} is VALID [2022-02-21 00:02:06,572 INFO L272 TraceCheckUtils]: 22: Hoare triple {52881#true} call FloppyPnp_#t~ret56#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {52898#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:06,572 INFO L290 TraceCheckUtils]: 23: Hoare triple {52898#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {52881#true} is VALID [2022-02-21 00:02:06,572 INFO L290 TraceCheckUtils]: 24: Hoare triple {52881#true} assume !(0 != ~compRegistered~0); {52881#true} is VALID [2022-02-21 00:02:06,572 INFO L290 TraceCheckUtils]: 25: Hoare triple {52881#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {52881#true} is VALID [2022-02-21 00:02:06,572 INFO L290 TraceCheckUtils]: 26: Hoare triple {52881#true} assume 0 == ~tmp_ndt_7~0#1; {52881#true} is VALID [2022-02-21 00:02:06,572 INFO L290 TraceCheckUtils]: 27: Hoare triple {52881#true} ~returnVal2~0#1 := 0; {52881#true} is VALID [2022-02-21 00:02:06,573 INFO L290 TraceCheckUtils]: 28: Hoare triple {52881#true} assume !(~s~0 == ~NP~0); {52881#true} is VALID [2022-02-21 00:02:06,573 INFO L290 TraceCheckUtils]: 29: Hoare triple {52881#true} assume !(~s~0 == ~MPR1~0); {52881#true} is VALID [2022-02-21 00:02:06,573 INFO L290 TraceCheckUtils]: 30: Hoare triple {52881#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {52899#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:06,573 INFO L290 TraceCheckUtils]: 31: Hoare triple {52899#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:06,574 INFO L290 TraceCheckUtils]: 32: Hoare triple {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:06,574 INFO L284 TraceCheckUtils]: 33: Hoare quadruple {52900#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {52881#true} #805#return; {52894#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret56#1|)} is VALID [2022-02-21 00:02:06,575 INFO L290 TraceCheckUtils]: 34: Hoare triple {52894#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret56#1|)} assume -2147483648 <= FloppyPnp_#t~ret56#1 && FloppyPnp_#t~ret56#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret56#1;havoc FloppyPnp_#t~ret56#1; {52895#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,575 INFO L290 TraceCheckUtils]: 35: Hoare triple {52895#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {52895#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,576 INFO L290 TraceCheckUtils]: 36: Hoare triple {52895#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} assume 0 == ~PagingReferenceCount~0; {52895#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,576 INFO L290 TraceCheckUtils]: 37: Hoare triple {52895#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {52896#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} is VALID [2022-02-21 00:02:06,576 INFO L290 TraceCheckUtils]: 38: Hoare triple {52896#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,577 INFO L290 TraceCheckUtils]: 39: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,577 INFO L290 TraceCheckUtils]: 40: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,577 INFO L290 TraceCheckUtils]: 41: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,578 INFO L290 TraceCheckUtils]: 42: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume -1 != main_~status~1#1; {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,578 INFO L290 TraceCheckUtils]: 43: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,578 INFO L290 TraceCheckUtils]: 44: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,579 INFO L290 TraceCheckUtils]: 45: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:06,579 INFO L290 TraceCheckUtils]: 46: Hoare triple {52897#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume main_~status~1#1 != ~lowerDriverReturn~0; {52882#false} is VALID [2022-02-21 00:02:06,579 INFO L272 TraceCheckUtils]: 47: Hoare triple {52882#false} call errorFn(); {52882#false} is VALID [2022-02-21 00:02:06,579 INFO L290 TraceCheckUtils]: 48: Hoare triple {52882#false} assume !false; {52882#false} is VALID [2022-02-21 00:02:06,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:06,580 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:06,580 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [109137383] [2022-02-21 00:02:06,580 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [109137383] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:06,580 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:06,580 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-02-21 00:02:06,581 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1756809327] [2022-02-21 00:02:06,582 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:06,582 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 49 [2022-02-21 00:02:06,582 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:06,583 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:06,612 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 49 edges. 49 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:06,613 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-21 00:02:06,613 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:06,613 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-21 00:02:06,613 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:06,614 INFO L87 Difference]: Start difference. First operand 421 states and 542 transitions. Second operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:07,867 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:07,867 INFO L93 Difference]: Finished difference Result 445 states and 568 transitions. [2022-02-21 00:02:07,867 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-21 00:02:07,868 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 49 [2022-02-21 00:02:07,868 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:07,868 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:07,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 296 transitions. [2022-02-21 00:02:07,870 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:07,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 296 transitions. [2022-02-21 00:02:07,872 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 296 transitions. [2022-02-21 00:02:08,076 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 296 edges. 296 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:08,082 INFO L225 Difference]: With dead ends: 445 [2022-02-21 00:02:08,083 INFO L226 Difference]: Without dead ends: 429 [2022-02-21 00:02:08,083 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2022-02-21 00:02:08,083 INFO L933 BasicCegarLoop]: 259 mSDtfsCounter, 53 mSDsluCounter, 1501 mSDsCounter, 0 mSdLazyCounter, 380 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 53 SdHoareTripleChecker+Valid, 1760 SdHoareTripleChecker+Invalid, 400 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 380 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:08,084 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [53 Valid, 1760 Invalid, 400 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 380 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:02:08,085 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 429 states. [2022-02-21 00:02:08,090 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 429 to 417. [2022-02-21 00:02:08,090 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:08,091 INFO L82 GeneralOperation]: Start isEquivalent. First operand 429 states. Second operand has 417 states, 371 states have (on average 1.2641509433962264) internal successors, (469), 375 states have internal predecessors, (469), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:08,091 INFO L74 IsIncluded]: Start isIncluded. First operand 429 states. Second operand has 417 states, 371 states have (on average 1.2641509433962264) internal successors, (469), 375 states have internal predecessors, (469), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:08,092 INFO L87 Difference]: Start difference. First operand 429 states. Second operand has 417 states, 371 states have (on average 1.2641509433962264) internal successors, (469), 375 states have internal predecessors, (469), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:08,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:08,101 INFO L93 Difference]: Finished difference Result 429 states and 550 transitions. [2022-02-21 00:02:08,102 INFO L276 IsEmpty]: Start isEmpty. Operand 429 states and 550 transitions. [2022-02-21 00:02:08,103 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:08,103 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:08,103 INFO L74 IsIncluded]: Start isIncluded. First operand has 417 states, 371 states have (on average 1.2641509433962264) internal successors, (469), 375 states have internal predecessors, (469), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) Second operand 429 states. [2022-02-21 00:02:08,104 INFO L87 Difference]: Start difference. First operand has 417 states, 371 states have (on average 1.2641509433962264) internal successors, (469), 375 states have internal predecessors, (469), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) Second operand 429 states. [2022-02-21 00:02:08,114 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:08,114 INFO L93 Difference]: Finished difference Result 429 states and 550 transitions. [2022-02-21 00:02:08,114 INFO L276 IsEmpty]: Start isEmpty. Operand 429 states and 550 transitions. [2022-02-21 00:02:08,115 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:08,115 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:08,116 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:08,116 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:08,116 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 417 states, 371 states have (on average 1.2641509433962264) internal successors, (469), 375 states have internal predecessors, (469), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:08,126 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 417 states to 417 states and 536 transitions. [2022-02-21 00:02:08,126 INFO L78 Accepts]: Start accepts. Automaton has 417 states and 536 transitions. Word has length 49 [2022-02-21 00:02:08,126 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:08,126 INFO L470 AbstractCegarLoop]: Abstraction has 417 states and 536 transitions. [2022-02-21 00:02:08,126 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.111111111111111) internal successors, (46), 7 states have internal predecessors, (46), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:08,127 INFO L276 IsEmpty]: Start isEmpty. Operand 417 states and 536 transitions. [2022-02-21 00:02:08,127 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 52 [2022-02-21 00:02:08,128 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:08,128 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:08,128 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable27 [2022-02-21 00:02:08,128 INFO L402 AbstractCegarLoop]: === Iteration 29 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:08,128 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:08,129 INFO L85 PathProgramCache]: Analyzing trace with hash -48892372, now seen corresponding path program 1 times [2022-02-21 00:02:08,129 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:08,129 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [104325659] [2022-02-21 00:02:08,129 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:08,129 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:08,190 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:08,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-21 00:02:08,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:08,260 INFO L290 TraceCheckUtils]: 0: Hoare triple {54650#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {54629#true} is VALID [2022-02-21 00:02:08,260 INFO L290 TraceCheckUtils]: 1: Hoare triple {54629#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {54629#true} is VALID [2022-02-21 00:02:08,260 INFO L290 TraceCheckUtils]: 2: Hoare triple {54629#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {54629#true} is VALID [2022-02-21 00:02:08,261 INFO L290 TraceCheckUtils]: 3: Hoare triple {54629#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {54629#true} is VALID [2022-02-21 00:02:08,261 INFO L290 TraceCheckUtils]: 4: Hoare triple {54629#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {54629#true} is VALID [2022-02-21 00:02:08,261 INFO L290 TraceCheckUtils]: 5: Hoare triple {54629#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {54629#true} is VALID [2022-02-21 00:02:08,261 INFO L290 TraceCheckUtils]: 6: Hoare triple {54629#true} assume { :end_inline_stubMoreProcessingRequired } true; {54629#true} is VALID [2022-02-21 00:02:08,261 INFO L290 TraceCheckUtils]: 7: Hoare triple {54629#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {54629#true} is VALID [2022-02-21 00:02:08,261 INFO L290 TraceCheckUtils]: 8: Hoare triple {54629#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {54629#true} is VALID [2022-02-21 00:02:08,262 INFO L290 TraceCheckUtils]: 9: Hoare triple {54629#true} assume !(1 == ~tmp_ndt_8~0#1); {54629#true} is VALID [2022-02-21 00:02:08,262 INFO L290 TraceCheckUtils]: 10: Hoare triple {54629#true} ~returnVal2~0#1 := 259; {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,262 INFO L290 TraceCheckUtils]: 11: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume !(~s~0 == ~NP~0); {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,263 INFO L290 TraceCheckUtils]: 12: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume ~s~0 == ~MPR1~0; {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,263 INFO L290 TraceCheckUtils]: 13: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,264 INFO L290 TraceCheckUtils]: 14: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} #res#1 := ~returnVal2~0#1; {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:08,264 INFO L290 TraceCheckUtils]: 15: Hoare triple {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} assume true; {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:08,265 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} {54629#true} #753#return; {54648#(and (<= |ULTIMATE.start_FloppyStartDevice_#t~ret74#1| 259) (< 258 |ULTIMATE.start_FloppyStartDevice_#t~ret74#1|))} is VALID [2022-02-21 00:02:08,265 INFO L290 TraceCheckUtils]: 0: Hoare triple {54629#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {54629#true} is VALID [2022-02-21 00:02:08,265 INFO L290 TraceCheckUtils]: 1: Hoare triple {54629#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {54629#true} is VALID [2022-02-21 00:02:08,265 INFO L290 TraceCheckUtils]: 2: Hoare triple {54629#true} assume { :end_inline__BLAST_init } true; {54629#true} is VALID [2022-02-21 00:02:08,266 INFO L290 TraceCheckUtils]: 3: Hoare triple {54629#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {54629#true} is VALID [2022-02-21 00:02:08,266 INFO L290 TraceCheckUtils]: 4: Hoare triple {54629#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {54629#true} is VALID [2022-02-21 00:02:08,266 INFO L290 TraceCheckUtils]: 5: Hoare triple {54629#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {54629#true} is VALID [2022-02-21 00:02:08,266 INFO L290 TraceCheckUtils]: 6: Hoare triple {54629#true} assume { :end_inline_stub_driver_init } true; {54629#true} is VALID [2022-02-21 00:02:08,266 INFO L290 TraceCheckUtils]: 7: Hoare triple {54629#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {54629#true} is VALID [2022-02-21 00:02:08,266 INFO L290 TraceCheckUtils]: 8: Hoare triple {54629#true} assume 3 == main_~tmp_ndt_1~0#1; {54629#true} is VALID [2022-02-21 00:02:08,266 INFO L290 TraceCheckUtils]: 9: Hoare triple {54629#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {54629#true} is VALID [2022-02-21 00:02:08,267 INFO L290 TraceCheckUtils]: 10: Hoare triple {54629#true} assume 1 == ~PagingReferenceCount~0; {54629#true} is VALID [2022-02-21 00:02:08,267 INFO L290 TraceCheckUtils]: 11: Hoare triple {54629#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {54629#true} is VALID [2022-02-21 00:02:08,267 INFO L290 TraceCheckUtils]: 12: Hoare triple {54629#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {54629#true} is VALID [2022-02-21 00:02:08,267 INFO L290 TraceCheckUtils]: 13: Hoare triple {54629#true} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {54629#true} is VALID [2022-02-21 00:02:08,267 INFO L290 TraceCheckUtils]: 14: Hoare triple {54629#true} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {54629#true} is VALID [2022-02-21 00:02:08,268 INFO L290 TraceCheckUtils]: 15: Hoare triple {54629#true} assume !(~s~0 != ~NP~0); {54629#true} is VALID [2022-02-21 00:02:08,268 INFO L290 TraceCheckUtils]: 16: Hoare triple {54629#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {54629#true} is VALID [2022-02-21 00:02:08,268 INFO L290 TraceCheckUtils]: 17: Hoare triple {54629#true} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {54629#true} is VALID [2022-02-21 00:02:08,269 INFO L272 TraceCheckUtils]: 18: Hoare triple {54629#true} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {54650#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:08,269 INFO L290 TraceCheckUtils]: 19: Hoare triple {54650#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {54629#true} is VALID [2022-02-21 00:02:08,269 INFO L290 TraceCheckUtils]: 20: Hoare triple {54629#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {54629#true} is VALID [2022-02-21 00:02:08,269 INFO L290 TraceCheckUtils]: 21: Hoare triple {54629#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {54629#true} is VALID [2022-02-21 00:02:08,269 INFO L290 TraceCheckUtils]: 22: Hoare triple {54629#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {54629#true} is VALID [2022-02-21 00:02:08,269 INFO L290 TraceCheckUtils]: 23: Hoare triple {54629#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {54629#true} is VALID [2022-02-21 00:02:08,270 INFO L290 TraceCheckUtils]: 24: Hoare triple {54629#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {54629#true} is VALID [2022-02-21 00:02:08,270 INFO L290 TraceCheckUtils]: 25: Hoare triple {54629#true} assume { :end_inline_stubMoreProcessingRequired } true; {54629#true} is VALID [2022-02-21 00:02:08,270 INFO L290 TraceCheckUtils]: 26: Hoare triple {54629#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {54629#true} is VALID [2022-02-21 00:02:08,270 INFO L290 TraceCheckUtils]: 27: Hoare triple {54629#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {54629#true} is VALID [2022-02-21 00:02:08,270 INFO L290 TraceCheckUtils]: 28: Hoare triple {54629#true} assume !(1 == ~tmp_ndt_8~0#1); {54629#true} is VALID [2022-02-21 00:02:08,271 INFO L290 TraceCheckUtils]: 29: Hoare triple {54629#true} ~returnVal2~0#1 := 259; {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,271 INFO L290 TraceCheckUtils]: 30: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume !(~s~0 == ~NP~0); {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,271 INFO L290 TraceCheckUtils]: 31: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume ~s~0 == ~MPR1~0; {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,272 INFO L290 TraceCheckUtils]: 32: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:08,272 INFO L290 TraceCheckUtils]: 33: Hoare triple {54651#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} #res#1 := ~returnVal2~0#1; {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:08,273 INFO L290 TraceCheckUtils]: 34: Hoare triple {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} assume true; {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:08,273 INFO L284 TraceCheckUtils]: 35: Hoare quadruple {54652#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} {54629#true} #753#return; {54648#(and (<= |ULTIMATE.start_FloppyStartDevice_#t~ret74#1| 259) (< 258 |ULTIMATE.start_FloppyStartDevice_#t~ret74#1|))} is VALID [2022-02-21 00:02:08,274 INFO L290 TraceCheckUtils]: 36: Hoare triple {54648#(and (<= |ULTIMATE.start_FloppyStartDevice_#t~ret74#1| 259) (< 258 |ULTIMATE.start_FloppyStartDevice_#t~ret74#1|))} assume -2147483648 <= FloppyStartDevice_#t~ret74#1 && FloppyStartDevice_#t~ret74#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret74#1;havoc FloppyStartDevice_#t~ret74#1;FloppyStartDevice_~__cil_tmp42~0#1 := FloppyStartDevice_~ntStatus~1#1; {54649#(= 259 |ULTIMATE.start_FloppyStartDevice_~__cil_tmp42~0#1|)} is VALID [2022-02-21 00:02:08,274 INFO L290 TraceCheckUtils]: 37: Hoare triple {54649#(= 259 |ULTIMATE.start_FloppyStartDevice_~__cil_tmp42~0#1|)} assume !(259 == FloppyStartDevice_~__cil_tmp42~0#1); {54630#false} is VALID [2022-02-21 00:02:08,275 INFO L290 TraceCheckUtils]: 38: Hoare triple {54630#false} FloppyStartDevice_~fdcInfo__BufferCount~0#1 := 0;FloppyStartDevice_~fdcInfo__BufferSize~0#1 := 0;FloppyStartDevice_~__cil_tmp43~0#1 := 3080;FloppyStartDevice_~__cil_tmp44~0#1 := 458752;FloppyStartDevice_~__cil_tmp45~0#1 := 461832;FloppyStartDevice_~__cil_tmp46~0#1 := 461835;assume { :begin_inline_FlFdcDeviceIo } true;FlFdcDeviceIo_#in~DeviceObject#1, FlFdcDeviceIo_#in~Ioctl#1, FlFdcDeviceIo_#in~Data#1 := FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~fdcInfo~0#1;havoc FlFdcDeviceIo_#res#1;havoc FlFdcDeviceIo_#t~nondet83#1, FlFdcDeviceIo_#t~nondet84#1, FlFdcDeviceIo_#t~nondet85#1, FlFdcDeviceIo_#t~ret86#1, FlFdcDeviceIo_#t~ret87#1, FlFdcDeviceIo_#t~ret88#1, FlFdcDeviceIo_~DeviceObject#1, FlFdcDeviceIo_~Ioctl#1, FlFdcDeviceIo_~Data#1, FlFdcDeviceIo_~ntStatus~2#1, FlFdcDeviceIo_~irp~0#1, FlFdcDeviceIo_~irpStack~0#1, FlFdcDeviceIo_~doneEvent~2#1, FlFdcDeviceIo_~ioStatus~0#1, FlFdcDeviceIo_~irp__Tail__Overlay__CurrentStackLocation~0#1, FlFdcDeviceIo_~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0#1, FlFdcDeviceIo_~__cil_tmp11~0#1;FlFdcDeviceIo_~DeviceObject#1 := FlFdcDeviceIo_#in~DeviceObject#1;FlFdcDeviceIo_~Ioctl#1 := FlFdcDeviceIo_#in~Ioctl#1;FlFdcDeviceIo_~Data#1 := FlFdcDeviceIo_#in~Data#1;havoc FlFdcDeviceIo_~ntStatus~2#1;havoc FlFdcDeviceIo_~irp~0#1;havoc FlFdcDeviceIo_~irpStack~0#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet83#1 && FlFdcDeviceIo_#t~nondet83#1 <= 2147483647;FlFdcDeviceIo_~doneEvent~2#1 := FlFdcDeviceIo_#t~nondet83#1;havoc FlFdcDeviceIo_#t~nondet83#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet84#1 && FlFdcDeviceIo_#t~nondet84#1 <= 2147483647;FlFdcDeviceIo_~ioStatus~0#1 := FlFdcDeviceIo_#t~nondet84#1;havoc FlFdcDeviceIo_#t~nondet84#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet85#1 && FlFdcDeviceIo_#t~nondet85#1 <= 2147483647;FlFdcDeviceIo_~irp__Tail__Overlay__CurrentStackLocation~0#1 := FlFdcDeviceIo_#t~nondet85#1;havoc FlFdcDeviceIo_#t~nondet85#1;havoc FlFdcDeviceIo_~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0#1;havoc FlFdcDeviceIo_~__cil_tmp11~0#1;assume { :begin_inline_IoBuildDeviceIoControlRequest } true;IoBuildDeviceIoControlRequest_#in~IoControlCode#1, IoBuildDeviceIoControlRequest_#in~DeviceObject#1, IoBuildDeviceIoControlRequest_#in~InputBuffer#1, IoBuildDeviceIoControlRequest_#in~InputBufferLength#1, IoBuildDeviceIoControlRequest_#in~OutputBuffer#1, IoBuildDeviceIoControlRequest_#in~OutputBufferLength#1, IoBuildDeviceIoControlRequest_#in~InternalDeviceIoControl#1, IoBuildDeviceIoControlRequest_#in~Event#1, IoBuildDeviceIoControlRequest_#in~IoStatusBlock#1 := FlFdcDeviceIo_~Ioctl#1, FlFdcDeviceIo_~DeviceObject#1, 0, 0, 0, 0, 1, FlFdcDeviceIo_~doneEvent~2#1, FlFdcDeviceIo_~ioStatus~0#1;havoc IoBuildDeviceIoControlRequest_#res#1;havoc IoBuildDeviceIoControlRequest_#t~nondet94#1, IoBuildDeviceIoControlRequest_#t~nondet95#1, IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1, IoBuildDeviceIoControlRequest_~IoControlCode#1, IoBuildDeviceIoControlRequest_~DeviceObject#1, IoBuildDeviceIoControlRequest_~InputBuffer#1, IoBuildDeviceIoControlRequest_~InputBufferLength#1, IoBuildDeviceIoControlRequest_~OutputBuffer#1, IoBuildDeviceIoControlRequest_~OutputBufferLength#1, IoBuildDeviceIoControlRequest_~InternalDeviceIoControl#1, IoBuildDeviceIoControlRequest_~Event#1, IoBuildDeviceIoControlRequest_~IoStatusBlock#1, IoBuildDeviceIoControlRequest_~malloc~0#1;IoBuildDeviceIoControlRequest_~IoControlCode#1 := IoBuildDeviceIoControlRequest_#in~IoControlCode#1;IoBuildDeviceIoControlRequest_~DeviceObject#1 := IoBuildDeviceIoControlRequest_#in~DeviceObject#1;IoBuildDeviceIoControlRequest_~InputBuffer#1 := IoBuildDeviceIoControlRequest_#in~InputBuffer#1;IoBuildDeviceIoControlRequest_~InputBufferLength#1 := IoBuildDeviceIoControlRequest_#in~InputBufferLength#1;IoBuildDeviceIoControlRequest_~OutputBuffer#1 := IoBuildDeviceIoControlRequest_#in~OutputBuffer#1;IoBuildDeviceIoControlRequest_~OutputBufferLength#1 := IoBuildDeviceIoControlRequest_#in~OutputBufferLength#1;IoBuildDeviceIoControlRequest_~InternalDeviceIoControl#1 := IoBuildDeviceIoControlRequest_#in~InternalDeviceIoControl#1;IoBuildDeviceIoControlRequest_~Event#1 := IoBuildDeviceIoControlRequest_#in~Event#1;IoBuildDeviceIoControlRequest_~IoStatusBlock#1 := IoBuildDeviceIoControlRequest_#in~IoStatusBlock#1;assume -2147483648 <= IoBuildDeviceIoControlRequest_#t~nondet94#1 && IoBuildDeviceIoControlRequest_#t~nondet94#1 <= 2147483647;IoBuildDeviceIoControlRequest_~malloc~0#1 := IoBuildDeviceIoControlRequest_#t~nondet94#1;havoc IoBuildDeviceIoControlRequest_#t~nondet94#1;~customIrp~0 := 1;havoc IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1;assume -2147483648 <= IoBuildDeviceIoControlRequest_#t~nondet95#1 && IoBuildDeviceIoControlRequest_#t~nondet95#1 <= 2147483647;IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1 := IoBuildDeviceIoControlRequest_#t~nondet95#1;havoc IoBuildDeviceIoControlRequest_#t~nondet95#1; {54630#false} is VALID [2022-02-21 00:02:08,279 INFO L290 TraceCheckUtils]: 39: Hoare triple {54630#false} assume 0 == IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1; {54630#false} is VALID [2022-02-21 00:02:08,279 INFO L290 TraceCheckUtils]: 40: Hoare triple {54630#false} IoBuildDeviceIoControlRequest_#res#1 := IoBuildDeviceIoControlRequest_~malloc~0#1; {54630#false} is VALID [2022-02-21 00:02:08,279 INFO L290 TraceCheckUtils]: 41: Hoare triple {54630#false} FlFdcDeviceIo_#t~ret86#1 := IoBuildDeviceIoControlRequest_#res#1;assume { :end_inline_IoBuildDeviceIoControlRequest } true;assume -2147483648 <= FlFdcDeviceIo_#t~ret86#1 && FlFdcDeviceIo_#t~ret86#1 <= 2147483647;FlFdcDeviceIo_~irp~0#1 := FlFdcDeviceIo_#t~ret86#1;havoc FlFdcDeviceIo_#t~ret86#1; {54630#false} is VALID [2022-02-21 00:02:08,279 INFO L290 TraceCheckUtils]: 42: Hoare triple {54630#false} assume 0 == FlFdcDeviceIo_~irp~0#1;FlFdcDeviceIo_#res#1 := -1073741670; {54630#false} is VALID [2022-02-21 00:02:08,280 INFO L290 TraceCheckUtils]: 43: Hoare triple {54630#false} FloppyStartDevice_#t~ret76#1 := FlFdcDeviceIo_#res#1;assume { :end_inline_FlFdcDeviceIo } true;assume -2147483648 <= FloppyStartDevice_#t~ret76#1 && FloppyStartDevice_#t~ret76#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret76#1;havoc FloppyStartDevice_#t~ret76#1; {54630#false} is VALID [2022-02-21 00:02:08,281 INFO L290 TraceCheckUtils]: 44: Hoare triple {54630#false} assume !(FloppyStartDevice_~ntStatus~1#1 >= 0); {54630#false} is VALID [2022-02-21 00:02:08,281 INFO L290 TraceCheckUtils]: 45: Hoare triple {54630#false} FloppyStartDevice_~Irp__IoStatus__Status~2#1 := FloppyStartDevice_~ntStatus~1#1;~myStatus~0 := FloppyStartDevice_~ntStatus~1#1; {54630#false} is VALID [2022-02-21 00:02:08,281 INFO L272 TraceCheckUtils]: 46: Hoare triple {54630#false} call IofCompleteRequest(FloppyStartDevice_~Irp#1, 0); {54630#false} is VALID [2022-02-21 00:02:08,281 INFO L290 TraceCheckUtils]: 47: Hoare triple {54630#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {54630#false} is VALID [2022-02-21 00:02:08,281 INFO L290 TraceCheckUtils]: 48: Hoare triple {54630#false} assume !(~s~0 == ~NP~0); {54630#false} is VALID [2022-02-21 00:02:08,281 INFO L272 TraceCheckUtils]: 49: Hoare triple {54630#false} call errorFn(); {54630#false} is VALID [2022-02-21 00:02:08,281 INFO L290 TraceCheckUtils]: 50: Hoare triple {54630#false} assume !false; {54630#false} is VALID [2022-02-21 00:02:08,282 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:08,282 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:08,282 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [104325659] [2022-02-21 00:02:08,282 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [104325659] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:08,282 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:08,282 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-21 00:02:08,283 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1863113377] [2022-02-21 00:02:08,283 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:08,283 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 51 [2022-02-21 00:02:08,284 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:08,284 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:08,318 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 51 edges. 51 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:08,319 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-21 00:02:08,319 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:08,320 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-21 00:02:08,320 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-21 00:02:08,321 INFO L87 Difference]: Start difference. First operand 417 states and 536 transitions. Second operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:09,373 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:09,374 INFO L93 Difference]: Finished difference Result 561 states and 736 transitions. [2022-02-21 00:02:09,374 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-21 00:02:09,374 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 51 [2022-02-21 00:02:09,374 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:09,375 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:09,376 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 371 transitions. [2022-02-21 00:02:09,376 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:09,379 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 371 transitions. [2022-02-21 00:02:09,379 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 371 transitions. [2022-02-21 00:02:09,625 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 371 edges. 371 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:09,638 INFO L225 Difference]: With dead ends: 561 [2022-02-21 00:02:09,639 INFO L226 Difference]: Without dead ends: 561 [2022-02-21 00:02:09,639 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 10 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:09,640 INFO L933 BasicCegarLoop]: 348 mSDtfsCounter, 104 mSDsluCounter, 1452 mSDsCounter, 0 mSdLazyCounter, 241 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 109 SdHoareTripleChecker+Valid, 1800 SdHoareTripleChecker+Invalid, 260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 241 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:09,640 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [109 Valid, 1800 Invalid, 260 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 241 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:02:09,641 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 561 states. [2022-02-21 00:02:09,646 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 561 to 417. [2022-02-21 00:02:09,646 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:09,647 INFO L82 GeneralOperation]: Start isEquivalent. First operand 561 states. Second operand has 417 states, 371 states have (on average 1.261455525606469) internal successors, (468), 375 states have internal predecessors, (468), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:09,647 INFO L74 IsIncluded]: Start isIncluded. First operand 561 states. Second operand has 417 states, 371 states have (on average 1.261455525606469) internal successors, (468), 375 states have internal predecessors, (468), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:09,648 INFO L87 Difference]: Start difference. First operand 561 states. Second operand has 417 states, 371 states have (on average 1.261455525606469) internal successors, (468), 375 states have internal predecessors, (468), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:09,663 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:09,663 INFO L93 Difference]: Finished difference Result 561 states and 736 transitions. [2022-02-21 00:02:09,663 INFO L276 IsEmpty]: Start isEmpty. Operand 561 states and 736 transitions. [2022-02-21 00:02:09,664 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:09,665 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:09,665 INFO L74 IsIncluded]: Start isIncluded. First operand has 417 states, 371 states have (on average 1.261455525606469) internal successors, (468), 375 states have internal predecessors, (468), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) Second operand 561 states. [2022-02-21 00:02:09,666 INFO L87 Difference]: Start difference. First operand has 417 states, 371 states have (on average 1.261455525606469) internal successors, (468), 375 states have internal predecessors, (468), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) Second operand 561 states. [2022-02-21 00:02:09,681 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:09,682 INFO L93 Difference]: Finished difference Result 561 states and 736 transitions. [2022-02-21 00:02:09,682 INFO L276 IsEmpty]: Start isEmpty. Operand 561 states and 736 transitions. [2022-02-21 00:02:09,683 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:09,683 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:09,683 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:09,683 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:09,684 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 417 states, 371 states have (on average 1.261455525606469) internal successors, (468), 375 states have internal predecessors, (468), 29 states have call successors, (29), 16 states have call predecessors, (29), 16 states have return successors, (38), 26 states have call predecessors, (38), 25 states have call successors, (38) [2022-02-21 00:02:09,693 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 417 states to 417 states and 535 transitions. [2022-02-21 00:02:09,694 INFO L78 Accepts]: Start accepts. Automaton has 417 states and 535 transitions. Word has length 51 [2022-02-21 00:02:09,694 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:09,694 INFO L470 AbstractCegarLoop]: Abstraction has 417 states and 535 transitions. [2022-02-21 00:02:09,694 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 6.714285714285714) internal successors, (47), 5 states have internal predecessors, (47), 2 states have call successors, (3), 2 states have call predecessors, (3), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:09,694 INFO L276 IsEmpty]: Start isEmpty. Operand 417 states and 535 transitions. [2022-02-21 00:02:09,695 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 54 [2022-02-21 00:02:09,695 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:09,695 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:09,695 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable28 [2022-02-21 00:02:09,696 INFO L402 AbstractCegarLoop]: === Iteration 30 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:09,696 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:09,696 INFO L85 PathProgramCache]: Analyzing trace with hash -1190154103, now seen corresponding path program 1 times [2022-02-21 00:02:09,696 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:09,697 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [655445687] [2022-02-21 00:02:09,697 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:09,697 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:09,717 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:09,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 23 [2022-02-21 00:02:09,765 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:09,779 INFO L290 TraceCheckUtils]: 0: Hoare triple {56776#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {56759#true} is VALID [2022-02-21 00:02:09,780 INFO L290 TraceCheckUtils]: 1: Hoare triple {56759#true} assume !(0 != ~compRegistered~0); {56759#true} is VALID [2022-02-21 00:02:09,780 INFO L290 TraceCheckUtils]: 2: Hoare triple {56759#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {56759#true} is VALID [2022-02-21 00:02:09,780 INFO L290 TraceCheckUtils]: 3: Hoare triple {56759#true} assume 0 == ~tmp_ndt_7~0#1; {56759#true} is VALID [2022-02-21 00:02:09,780 INFO L290 TraceCheckUtils]: 4: Hoare triple {56759#true} ~returnVal2~0#1 := 0; {56759#true} is VALID [2022-02-21 00:02:09,780 INFO L290 TraceCheckUtils]: 5: Hoare triple {56759#true} assume !(~s~0 == ~NP~0); {56759#true} is VALID [2022-02-21 00:02:09,781 INFO L290 TraceCheckUtils]: 6: Hoare triple {56759#true} assume !(~s~0 == ~MPR1~0); {56759#true} is VALID [2022-02-21 00:02:09,781 INFO L290 TraceCheckUtils]: 7: Hoare triple {56759#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {56777#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:09,781 INFO L290 TraceCheckUtils]: 8: Hoare triple {56777#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:09,782 INFO L290 TraceCheckUtils]: 9: Hoare triple {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:09,782 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {56759#true} #799#return; {56772#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret50#1|)} is VALID [2022-02-21 00:02:09,783 INFO L290 TraceCheckUtils]: 0: Hoare triple {56759#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {56759#true} is VALID [2022-02-21 00:02:09,783 INFO L290 TraceCheckUtils]: 1: Hoare triple {56759#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {56759#true} is VALID [2022-02-21 00:02:09,783 INFO L290 TraceCheckUtils]: 2: Hoare triple {56759#true} assume { :end_inline__BLAST_init } true; {56759#true} is VALID [2022-02-21 00:02:09,783 INFO L290 TraceCheckUtils]: 3: Hoare triple {56759#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {56759#true} is VALID [2022-02-21 00:02:09,783 INFO L290 TraceCheckUtils]: 4: Hoare triple {56759#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {56759#true} is VALID [2022-02-21 00:02:09,783 INFO L290 TraceCheckUtils]: 5: Hoare triple {56759#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {56759#true} is VALID [2022-02-21 00:02:09,784 INFO L290 TraceCheckUtils]: 6: Hoare triple {56759#true} assume { :end_inline_stub_driver_init } true; {56759#true} is VALID [2022-02-21 00:02:09,784 INFO L290 TraceCheckUtils]: 7: Hoare triple {56759#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {56759#true} is VALID [2022-02-21 00:02:09,784 INFO L290 TraceCheckUtils]: 8: Hoare triple {56759#true} assume 3 == main_~tmp_ndt_1~0#1; {56759#true} is VALID [2022-02-21 00:02:09,784 INFO L290 TraceCheckUtils]: 9: Hoare triple {56759#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {56759#true} is VALID [2022-02-21 00:02:09,784 INFO L290 TraceCheckUtils]: 10: Hoare triple {56759#true} assume 1 == ~PagingReferenceCount~0; {56759#true} is VALID [2022-02-21 00:02:09,784 INFO L290 TraceCheckUtils]: 11: Hoare triple {56759#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {56759#true} is VALID [2022-02-21 00:02:09,784 INFO L290 TraceCheckUtils]: 12: Hoare triple {56759#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {56759#true} is VALID [2022-02-21 00:02:09,785 INFO L290 TraceCheckUtils]: 13: Hoare triple {56759#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {56759#true} is VALID [2022-02-21 00:02:09,785 INFO L290 TraceCheckUtils]: 14: Hoare triple {56759#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {56759#true} is VALID [2022-02-21 00:02:09,785 INFO L290 TraceCheckUtils]: 15: Hoare triple {56759#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {56759#true} is VALID [2022-02-21 00:02:09,785 INFO L290 TraceCheckUtils]: 16: Hoare triple {56759#true} assume !(6 == FloppyPnp_~irpSp__MinorFunction~0#1); {56759#true} is VALID [2022-02-21 00:02:09,785 INFO L290 TraceCheckUtils]: 17: Hoare triple {56759#true} assume !(3 == FloppyPnp_~irpSp__MinorFunction~0#1); {56759#true} is VALID [2022-02-21 00:02:09,785 INFO L290 TraceCheckUtils]: 18: Hoare triple {56759#true} assume !(4 == FloppyPnp_~irpSp__MinorFunction~0#1); {56759#true} is VALID [2022-02-21 00:02:09,785 INFO L290 TraceCheckUtils]: 19: Hoare triple {56759#true} assume 2 == FloppyPnp_~irpSp__MinorFunction~0#1; {56759#true} is VALID [2022-02-21 00:02:09,786 INFO L290 TraceCheckUtils]: 20: Hoare triple {56759#true} FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 0;FloppyPnp_~disketteExtension__IsStarted~0#1 := 0;FloppyPnp_~disketteExtension__IsRemoved~0#1 := 1; {56759#true} is VALID [2022-02-21 00:02:09,786 INFO L290 TraceCheckUtils]: 21: Hoare triple {56759#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {56759#true} is VALID [2022-02-21 00:02:09,786 INFO L290 TraceCheckUtils]: 22: Hoare triple {56759#true} FloppyPnp_#t~post48#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post48#1;havoc FloppyPnp_#t~post48#1;FloppyPnp_#t~post49#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post49#1;havoc FloppyPnp_#t~post49#1;FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0; {56759#true} is VALID [2022-02-21 00:02:09,787 INFO L272 TraceCheckUtils]: 23: Hoare triple {56759#true} call FloppyPnp_#t~ret50#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {56776#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:09,787 INFO L290 TraceCheckUtils]: 24: Hoare triple {56776#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {56759#true} is VALID [2022-02-21 00:02:09,787 INFO L290 TraceCheckUtils]: 25: Hoare triple {56759#true} assume !(0 != ~compRegistered~0); {56759#true} is VALID [2022-02-21 00:02:09,787 INFO L290 TraceCheckUtils]: 26: Hoare triple {56759#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {56759#true} is VALID [2022-02-21 00:02:09,787 INFO L290 TraceCheckUtils]: 27: Hoare triple {56759#true} assume 0 == ~tmp_ndt_7~0#1; {56759#true} is VALID [2022-02-21 00:02:09,787 INFO L290 TraceCheckUtils]: 28: Hoare triple {56759#true} ~returnVal2~0#1 := 0; {56759#true} is VALID [2022-02-21 00:02:09,787 INFO L290 TraceCheckUtils]: 29: Hoare triple {56759#true} assume !(~s~0 == ~NP~0); {56759#true} is VALID [2022-02-21 00:02:09,788 INFO L290 TraceCheckUtils]: 30: Hoare triple {56759#true} assume !(~s~0 == ~MPR1~0); {56759#true} is VALID [2022-02-21 00:02:09,788 INFO L290 TraceCheckUtils]: 31: Hoare triple {56759#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {56777#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:09,788 INFO L290 TraceCheckUtils]: 32: Hoare triple {56777#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:09,789 INFO L290 TraceCheckUtils]: 33: Hoare triple {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:09,789 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {56778#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {56759#true} #799#return; {56772#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret50#1|)} is VALID [2022-02-21 00:02:09,790 INFO L290 TraceCheckUtils]: 35: Hoare triple {56772#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret50#1|)} assume -2147483648 <= FloppyPnp_#t~ret50#1 && FloppyPnp_#t~ret50#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret50#1;havoc FloppyPnp_#t~ret50#1; {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,790 INFO L290 TraceCheckUtils]: 36: Hoare triple {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} assume !(0 != FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1); {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,790 INFO L290 TraceCheckUtils]: 37: Hoare triple {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} assume !(0 != FloppyPnp_~disketteExtension__ArcName__Length~0#1); {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,791 INFO L290 TraceCheckUtils]: 38: Hoare triple {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#t~post53#1 := FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~post53#1 - 1;havoc FloppyPnp_#t~post53#1; {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,791 INFO L290 TraceCheckUtils]: 39: Hoare triple {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,791 INFO L290 TraceCheckUtils]: 40: Hoare triple {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} assume 0 == ~PagingReferenceCount~0; {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,792 INFO L290 TraceCheckUtils]: 41: Hoare triple {56773#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {56774#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} is VALID [2022-02-21 00:02:09,792 INFO L290 TraceCheckUtils]: 42: Hoare triple {56774#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,792 INFO L290 TraceCheckUtils]: 43: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,793 INFO L290 TraceCheckUtils]: 44: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,793 INFO L290 TraceCheckUtils]: 45: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,793 INFO L290 TraceCheckUtils]: 46: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume -1 != main_~status~1#1; {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,794 INFO L290 TraceCheckUtils]: 47: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,794 INFO L290 TraceCheckUtils]: 48: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,794 INFO L290 TraceCheckUtils]: 49: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:09,795 INFO L290 TraceCheckUtils]: 50: Hoare triple {56775#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume main_~status~1#1 != ~lowerDriverReturn~0; {56760#false} is VALID [2022-02-21 00:02:09,795 INFO L272 TraceCheckUtils]: 51: Hoare triple {56760#false} call errorFn(); {56760#false} is VALID [2022-02-21 00:02:09,795 INFO L290 TraceCheckUtils]: 52: Hoare triple {56760#false} assume !false; {56760#false} is VALID [2022-02-21 00:02:09,795 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:09,795 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:09,796 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [655445687] [2022-02-21 00:02:09,796 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [655445687] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:09,796 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:09,796 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-02-21 00:02:09,796 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1221439666] [2022-02-21 00:02:09,796 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:09,797 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 53 [2022-02-21 00:02:09,797 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:09,797 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:09,829 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 53 edges. 53 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:09,829 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-21 00:02:09,829 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:09,830 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-21 00:02:09,830 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=57, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:09,830 INFO L87 Difference]: Start difference. First operand 417 states and 535 transitions. Second operand has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:11,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:11,070 INFO L93 Difference]: Finished difference Result 441 states and 561 transitions. [2022-02-21 00:02:11,070 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-21 00:02:11,071 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) Word has length 53 [2022-02-21 00:02:11,071 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:11,071 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:11,072 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 290 transitions. [2022-02-21 00:02:11,072 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:11,073 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 290 transitions. [2022-02-21 00:02:11,074 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 290 transitions. [2022-02-21 00:02:11,256 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 290 edges. 290 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:11,262 INFO L225 Difference]: With dead ends: 441 [2022-02-21 00:02:11,262 INFO L226 Difference]: Without dead ends: 407 [2022-02-21 00:02:11,263 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 3 SyntacticMatches, 0 SemanticMatches, 10 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=103, Unknown=0, NotChecked=0, Total=132 [2022-02-21 00:02:11,263 INFO L933 BasicCegarLoop]: 261 mSDtfsCounter, 61 mSDsluCounter, 1503 mSDsCounter, 0 mSdLazyCounter, 380 mSolverCounterSat, 19 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 62 SdHoareTripleChecker+Valid, 1764 SdHoareTripleChecker+Invalid, 399 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 19 IncrementalHoareTripleChecker+Valid, 380 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:11,263 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [62 Valid, 1764 Invalid, 399 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [19 Valid, 380 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:02:11,264 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 407 states. [2022-02-21 00:02:11,268 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 407 to 395. [2022-02-21 00:02:11,269 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:11,269 INFO L82 GeneralOperation]: Start isEquivalent. First operand 407 states. Second operand has 395 states, 352 states have (on average 1.2613636363636365) internal successors, (444), 356 states have internal predecessors, (444), 27 states have call successors, (27), 15 states have call predecessors, (27), 15 states have return successors, (36), 24 states have call predecessors, (36), 23 states have call successors, (36) [2022-02-21 00:02:11,270 INFO L74 IsIncluded]: Start isIncluded. First operand 407 states. Second operand has 395 states, 352 states have (on average 1.2613636363636365) internal successors, (444), 356 states have internal predecessors, (444), 27 states have call successors, (27), 15 states have call predecessors, (27), 15 states have return successors, (36), 24 states have call predecessors, (36), 23 states have call successors, (36) [2022-02-21 00:02:11,270 INFO L87 Difference]: Start difference. First operand 407 states. Second operand has 395 states, 352 states have (on average 1.2613636363636365) internal successors, (444), 356 states have internal predecessors, (444), 27 states have call successors, (27), 15 states have call predecessors, (27), 15 states have return successors, (36), 24 states have call predecessors, (36), 23 states have call successors, (36) [2022-02-21 00:02:11,279 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:11,279 INFO L93 Difference]: Finished difference Result 407 states and 521 transitions. [2022-02-21 00:02:11,279 INFO L276 IsEmpty]: Start isEmpty. Operand 407 states and 521 transitions. [2022-02-21 00:02:11,280 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:11,280 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:11,280 INFO L74 IsIncluded]: Start isIncluded. First operand has 395 states, 352 states have (on average 1.2613636363636365) internal successors, (444), 356 states have internal predecessors, (444), 27 states have call successors, (27), 15 states have call predecessors, (27), 15 states have return successors, (36), 24 states have call predecessors, (36), 23 states have call successors, (36) Second operand 407 states. [2022-02-21 00:02:11,280 INFO L87 Difference]: Start difference. First operand has 395 states, 352 states have (on average 1.2613636363636365) internal successors, (444), 356 states have internal predecessors, (444), 27 states have call successors, (27), 15 states have call predecessors, (27), 15 states have return successors, (36), 24 states have call predecessors, (36), 23 states have call successors, (36) Second operand 407 states. [2022-02-21 00:02:11,287 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:11,287 INFO L93 Difference]: Finished difference Result 407 states and 521 transitions. [2022-02-21 00:02:11,288 INFO L276 IsEmpty]: Start isEmpty. Operand 407 states and 521 transitions. [2022-02-21 00:02:11,288 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:11,288 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:11,289 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:11,289 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:11,289 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 395 states, 352 states have (on average 1.2613636363636365) internal successors, (444), 356 states have internal predecessors, (444), 27 states have call successors, (27), 15 states have call predecessors, (27), 15 states have return successors, (36), 24 states have call predecessors, (36), 23 states have call successors, (36) [2022-02-21 00:02:11,298 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 395 states to 395 states and 507 transitions. [2022-02-21 00:02:11,298 INFO L78 Accepts]: Start accepts. Automaton has 395 states and 507 transitions. Word has length 53 [2022-02-21 00:02:11,298 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:11,299 INFO L470 AbstractCegarLoop]: Abstraction has 395 states and 507 transitions. [2022-02-21 00:02:11,299 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 5.555555555555555) internal successors, (50), 7 states have internal predecessors, (50), 2 states have call successors, (2), 2 states have call predecessors, (2), 1 states have return successors, (1), 1 states have call predecessors, (1), 1 states have call successors, (1) [2022-02-21 00:02:11,299 INFO L276 IsEmpty]: Start isEmpty. Operand 395 states and 507 transitions. [2022-02-21 00:02:11,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 60 [2022-02-21 00:02:11,300 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:11,300 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:11,300 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable29 [2022-02-21 00:02:11,301 INFO L402 AbstractCegarLoop]: === Iteration 31 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:11,301 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:11,301 INFO L85 PathProgramCache]: Analyzing trace with hash -1140585270, now seen corresponding path program 1 times [2022-02-21 00:02:11,301 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:11,301 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1086858199] [2022-02-21 00:02:11,302 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:11,302 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:11,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:11,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-21 00:02:11,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:11,367 INFO L290 TraceCheckUtils]: 0: Hoare triple {58466#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {58437#true} is VALID [2022-02-21 00:02:11,367 INFO L290 TraceCheckUtils]: 1: Hoare triple {58437#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {58437#true} is VALID [2022-02-21 00:02:11,368 INFO L290 TraceCheckUtils]: 2: Hoare triple {58437#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {58437#true} is VALID [2022-02-21 00:02:11,368 INFO L290 TraceCheckUtils]: 3: Hoare triple {58437#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {58437#true} is VALID [2022-02-21 00:02:11,368 INFO L290 TraceCheckUtils]: 4: Hoare triple {58437#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {58437#true} is VALID [2022-02-21 00:02:11,368 INFO L290 TraceCheckUtils]: 5: Hoare triple {58437#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {58437#true} is VALID [2022-02-21 00:02:11,368 INFO L290 TraceCheckUtils]: 6: Hoare triple {58437#true} assume { :end_inline_stubMoreProcessingRequired } true; {58437#true} is VALID [2022-02-21 00:02:11,368 INFO L290 TraceCheckUtils]: 7: Hoare triple {58437#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {58437#true} is VALID [2022-02-21 00:02:11,369 INFO L290 TraceCheckUtils]: 8: Hoare triple {58437#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {58437#true} is VALID [2022-02-21 00:02:11,369 INFO L290 TraceCheckUtils]: 9: Hoare triple {58437#true} assume !(1 == ~tmp_ndt_8~0#1); {58437#true} is VALID [2022-02-21 00:02:11,369 INFO L290 TraceCheckUtils]: 10: Hoare triple {58437#true} ~returnVal2~0#1 := 259; {58437#true} is VALID [2022-02-21 00:02:11,369 INFO L290 TraceCheckUtils]: 11: Hoare triple {58437#true} assume !(~s~0 == ~NP~0); {58437#true} is VALID [2022-02-21 00:02:11,369 INFO L290 TraceCheckUtils]: 12: Hoare triple {58437#true} assume ~s~0 == ~MPR1~0; {58437#true} is VALID [2022-02-21 00:02:11,370 INFO L290 TraceCheckUtils]: 13: Hoare triple {58437#true} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,370 INFO L290 TraceCheckUtils]: 14: Hoare triple {58456#(= ~MPR3~0 ~s~0)} #res#1 := ~returnVal2~0#1; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,370 INFO L290 TraceCheckUtils]: 15: Hoare triple {58456#(= ~MPR3~0 ~s~0)} assume true; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,371 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {58456#(= ~MPR3~0 ~s~0)} {58437#true} #787#return; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,377 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-21 00:02:11,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:11,392 INFO L290 TraceCheckUtils]: 0: Hoare triple {58467#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {58468#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:02:11,392 INFO L290 TraceCheckUtils]: 1: Hoare triple {58468#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,393 INFO L290 TraceCheckUtils]: 2: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,393 INFO L290 TraceCheckUtils]: 3: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,393 INFO L290 TraceCheckUtils]: 4: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_9~0 := #t~nondet105;havoc #t~nondet105; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,394 INFO L290 TraceCheckUtils]: 5: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_9~0; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,394 INFO L290 TraceCheckUtils]: 6: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,395 INFO L290 TraceCheckUtils]: 7: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,396 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {58469#(not (= ~MPR3~0 |old(~s~0)|))} {58456#(= ~MPR3~0 ~s~0)} #789#return; {58438#false} is VALID [2022-02-21 00:02:11,396 INFO L290 TraceCheckUtils]: 0: Hoare triple {58437#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {58437#true} is VALID [2022-02-21 00:02:11,396 INFO L290 TraceCheckUtils]: 1: Hoare triple {58437#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {58437#true} is VALID [2022-02-21 00:02:11,396 INFO L290 TraceCheckUtils]: 2: Hoare triple {58437#true} assume { :end_inline__BLAST_init } true; {58437#true} is VALID [2022-02-21 00:02:11,397 INFO L290 TraceCheckUtils]: 3: Hoare triple {58437#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {58437#true} is VALID [2022-02-21 00:02:11,397 INFO L290 TraceCheckUtils]: 4: Hoare triple {58437#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {58437#true} is VALID [2022-02-21 00:02:11,397 INFO L290 TraceCheckUtils]: 5: Hoare triple {58437#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {58437#true} is VALID [2022-02-21 00:02:11,397 INFO L290 TraceCheckUtils]: 6: Hoare triple {58437#true} assume { :end_inline_stub_driver_init } true; {58437#true} is VALID [2022-02-21 00:02:11,397 INFO L290 TraceCheckUtils]: 7: Hoare triple {58437#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {58437#true} is VALID [2022-02-21 00:02:11,397 INFO L290 TraceCheckUtils]: 8: Hoare triple {58437#true} assume 3 == main_~tmp_ndt_1~0#1; {58437#true} is VALID [2022-02-21 00:02:11,397 INFO L290 TraceCheckUtils]: 9: Hoare triple {58437#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {58437#true} is VALID [2022-02-21 00:02:11,398 INFO L290 TraceCheckUtils]: 10: Hoare triple {58437#true} assume 1 == ~PagingReferenceCount~0; {58437#true} is VALID [2022-02-21 00:02:11,398 INFO L290 TraceCheckUtils]: 11: Hoare triple {58437#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {58437#true} is VALID [2022-02-21 00:02:11,398 INFO L290 TraceCheckUtils]: 12: Hoare triple {58437#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {58437#true} is VALID [2022-02-21 00:02:11,398 INFO L290 TraceCheckUtils]: 13: Hoare triple {58437#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {58437#true} is VALID [2022-02-21 00:02:11,398 INFO L290 TraceCheckUtils]: 14: Hoare triple {58437#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {58437#true} is VALID [2022-02-21 00:02:11,398 INFO L290 TraceCheckUtils]: 15: Hoare triple {58437#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {58437#true} is VALID [2022-02-21 00:02:11,399 INFO L290 TraceCheckUtils]: 16: Hoare triple {58437#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {58437#true} is VALID [2022-02-21 00:02:11,399 INFO L290 TraceCheckUtils]: 17: Hoare triple {58437#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {58437#true} is VALID [2022-02-21 00:02:11,399 INFO L290 TraceCheckUtils]: 18: Hoare triple {58437#true} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0;FloppyPnp_~irpSp___0~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~nextIrpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~nextIrpSp__Control~0#1 := 0; {58437#true} is VALID [2022-02-21 00:02:11,399 INFO L290 TraceCheckUtils]: 19: Hoare triple {58437#true} assume !(~s~0 != ~NP~0); {58437#true} is VALID [2022-02-21 00:02:11,399 INFO L290 TraceCheckUtils]: 20: Hoare triple {58437#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {58437#true} is VALID [2022-02-21 00:02:11,399 INFO L290 TraceCheckUtils]: 21: Hoare triple {58437#true} FloppyPnp_~irpSp___1~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~irpSp__Context~0#1 := FloppyPnp_~doneEvent~0#1;FloppyPnp_~irpSp__Control~0#1 := 224; {58437#true} is VALID [2022-02-21 00:02:11,400 INFO L272 TraceCheckUtils]: 22: Hoare triple {58437#true} call FloppyPnp_#t~ret43#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {58466#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,400 INFO L290 TraceCheckUtils]: 23: Hoare triple {58466#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {58437#true} is VALID [2022-02-21 00:02:11,400 INFO L290 TraceCheckUtils]: 24: Hoare triple {58437#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {58437#true} is VALID [2022-02-21 00:02:11,401 INFO L290 TraceCheckUtils]: 25: Hoare triple {58437#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {58437#true} is VALID [2022-02-21 00:02:11,401 INFO L290 TraceCheckUtils]: 26: Hoare triple {58437#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {58437#true} is VALID [2022-02-21 00:02:11,401 INFO L290 TraceCheckUtils]: 27: Hoare triple {58437#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {58437#true} is VALID [2022-02-21 00:02:11,401 INFO L290 TraceCheckUtils]: 28: Hoare triple {58437#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {58437#true} is VALID [2022-02-21 00:02:11,401 INFO L290 TraceCheckUtils]: 29: Hoare triple {58437#true} assume { :end_inline_stubMoreProcessingRequired } true; {58437#true} is VALID [2022-02-21 00:02:11,401 INFO L290 TraceCheckUtils]: 30: Hoare triple {58437#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {58437#true} is VALID [2022-02-21 00:02:11,402 INFO L290 TraceCheckUtils]: 31: Hoare triple {58437#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {58437#true} is VALID [2022-02-21 00:02:11,402 INFO L290 TraceCheckUtils]: 32: Hoare triple {58437#true} assume !(1 == ~tmp_ndt_8~0#1); {58437#true} is VALID [2022-02-21 00:02:11,402 INFO L290 TraceCheckUtils]: 33: Hoare triple {58437#true} ~returnVal2~0#1 := 259; {58437#true} is VALID [2022-02-21 00:02:11,402 INFO L290 TraceCheckUtils]: 34: Hoare triple {58437#true} assume !(~s~0 == ~NP~0); {58437#true} is VALID [2022-02-21 00:02:11,402 INFO L290 TraceCheckUtils]: 35: Hoare triple {58437#true} assume ~s~0 == ~MPR1~0; {58437#true} is VALID [2022-02-21 00:02:11,403 INFO L290 TraceCheckUtils]: 36: Hoare triple {58437#true} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,403 INFO L290 TraceCheckUtils]: 37: Hoare triple {58456#(= ~MPR3~0 ~s~0)} #res#1 := ~returnVal2~0#1; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,404 INFO L290 TraceCheckUtils]: 38: Hoare triple {58456#(= ~MPR3~0 ~s~0)} assume true; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,404 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {58456#(= ~MPR3~0 ~s~0)} {58437#true} #787#return; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,405 INFO L290 TraceCheckUtils]: 40: Hoare triple {58456#(= ~MPR3~0 ~s~0)} assume -2147483648 <= FloppyPnp_#t~ret43#1 && FloppyPnp_#t~ret43#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret43#1;havoc FloppyPnp_#t~ret43#1;FloppyPnp_~__cil_tmp30~0#1 := FloppyPnp_~ntStatus~0#1; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,405 INFO L290 TraceCheckUtils]: 41: Hoare triple {58456#(= ~MPR3~0 ~s~0)} assume 259 == FloppyPnp_~__cil_tmp30~0#1; {58456#(= ~MPR3~0 ~s~0)} is VALID [2022-02-21 00:02:11,406 INFO L272 TraceCheckUtils]: 42: Hoare triple {58456#(= ~MPR3~0 ~s~0)} call FloppyPnp_#t~ret44#1 := KeWaitForSingleObject(FloppyPnp_~doneEvent~0#1, ~Executive~0, ~KernelMode~0, 0, 0); {58467#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,407 INFO L290 TraceCheckUtils]: 43: Hoare triple {58467#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {58468#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:02:11,407 INFO L290 TraceCheckUtils]: 44: Hoare triple {58468#(= ~s~0 |old(~s~0)|)} assume !(~s~0 == ~MPR3~0); {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,408 INFO L290 TraceCheckUtils]: 45: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume !(1 == ~customIrp~0); {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,408 INFO L290 TraceCheckUtils]: 46: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume !(~s~0 == ~MPR3~0); {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,408 INFO L290 TraceCheckUtils]: 47: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_9~0 := #t~nondet105;havoc #t~nondet105; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,409 INFO L290 TraceCheckUtils]: 48: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume 0 == ~tmp_ndt_9~0; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,409 INFO L290 TraceCheckUtils]: 49: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} #res := 0; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,410 INFO L290 TraceCheckUtils]: 50: Hoare triple {58469#(not (= ~MPR3~0 |old(~s~0)|))} assume true; {58469#(not (= ~MPR3~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:11,411 INFO L284 TraceCheckUtils]: 51: Hoare quadruple {58469#(not (= ~MPR3~0 |old(~s~0)|))} {58456#(= ~MPR3~0 ~s~0)} #789#return; {58438#false} is VALID [2022-02-21 00:02:11,411 INFO L290 TraceCheckUtils]: 52: Hoare triple {58438#false} assume -2147483648 <= FloppyPnp_#t~ret44#1 && FloppyPnp_#t~ret44#1 <= 2147483647;havoc FloppyPnp_#t~ret44#1;FloppyPnp_~ntStatus~0#1 := ~myStatus~0; {58438#false} is VALID [2022-02-21 00:02:11,411 INFO L290 TraceCheckUtils]: 53: Hoare triple {58438#false} FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := FloppyPnp_~ntStatus~0#1;~myStatus~0 := FloppyPnp_~ntStatus~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0; {58438#false} is VALID [2022-02-21 00:02:11,411 INFO L272 TraceCheckUtils]: 54: Hoare triple {58438#false} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {58438#false} is VALID [2022-02-21 00:02:11,411 INFO L290 TraceCheckUtils]: 55: Hoare triple {58438#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {58438#false} is VALID [2022-02-21 00:02:11,412 INFO L290 TraceCheckUtils]: 56: Hoare triple {58438#false} assume !(~s~0 == ~NP~0); {58438#false} is VALID [2022-02-21 00:02:11,412 INFO L272 TraceCheckUtils]: 57: Hoare triple {58438#false} call errorFn(); {58438#false} is VALID [2022-02-21 00:02:11,412 INFO L290 TraceCheckUtils]: 58: Hoare triple {58438#false} assume !false; {58438#false} is VALID [2022-02-21 00:02:11,412 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:11,412 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:11,413 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1086858199] [2022-02-21 00:02:11,413 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1086858199] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:11,413 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:11,413 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-21 00:02:11,413 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1071140127] [2022-02-21 00:02:11,413 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:11,414 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.571428571428571) internal successors, (53), 5 states have internal predecessors, (53), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 59 [2022-02-21 00:02:11,414 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:11,414 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 7.571428571428571) internal successors, (53), 5 states have internal predecessors, (53), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:11,453 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 59 edges. 59 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:11,453 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-21 00:02:11,454 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:11,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-21 00:02:11,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-02-21 00:02:11,454 INFO L87 Difference]: Start difference. First operand 395 states and 507 transitions. Second operand has 7 states, 7 states have (on average 7.571428571428571) internal successors, (53), 5 states have internal predecessors, (53), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:12,394 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:12,395 INFO L93 Difference]: Finished difference Result 382 states and 481 transitions. [2022-02-21 00:02:12,395 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-02-21 00:02:12,395 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 7.571428571428571) internal successors, (53), 5 states have internal predecessors, (53), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 59 [2022-02-21 00:02:12,395 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:12,396 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.571428571428571) internal successors, (53), 5 states have internal predecessors, (53), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:12,397 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 331 transitions. [2022-02-21 00:02:12,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 7.571428571428571) internal successors, (53), 5 states have internal predecessors, (53), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:12,399 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 331 transitions. [2022-02-21 00:02:12,399 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 8 states and 331 transitions. [2022-02-21 00:02:12,611 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 331 edges. 331 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:12,616 INFO L225 Difference]: With dead ends: 382 [2022-02-21 00:02:12,616 INFO L226 Difference]: Without dead ends: 382 [2022-02-21 00:02:12,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 13 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=32, Invalid=58, Unknown=0, NotChecked=0, Total=90 [2022-02-21 00:02:12,618 INFO L933 BasicCegarLoop]: 310 mSDtfsCounter, 132 mSDsluCounter, 1076 mSDsCounter, 0 mSdLazyCounter, 293 mSolverCounterSat, 31 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 133 SdHoareTripleChecker+Valid, 1386 SdHoareTripleChecker+Invalid, 324 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 31 IncrementalHoareTripleChecker+Valid, 293 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:12,618 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [133 Valid, 1386 Invalid, 324 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [31 Valid, 293 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:02:12,619 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 382 states. [2022-02-21 00:02:12,625 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 382 to 362. [2022-02-21 00:02:12,625 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:12,626 INFO L82 GeneralOperation]: Start isEquivalent. First operand 382 states. Second operand has 362 states, 324 states have (on average 1.2623456790123457) internal successors, (409), 327 states have internal predecessors, (409), 24 states have call successors, (24), 14 states have call predecessors, (24), 13 states have return successors, (24), 21 states have call predecessors, (24), 21 states have call successors, (24) [2022-02-21 00:02:12,626 INFO L74 IsIncluded]: Start isIncluded. First operand 382 states. Second operand has 362 states, 324 states have (on average 1.2623456790123457) internal successors, (409), 327 states have internal predecessors, (409), 24 states have call successors, (24), 14 states have call predecessors, (24), 13 states have return successors, (24), 21 states have call predecessors, (24), 21 states have call successors, (24) [2022-02-21 00:02:12,627 INFO L87 Difference]: Start difference. First operand 382 states. Second operand has 362 states, 324 states have (on average 1.2623456790123457) internal successors, (409), 327 states have internal predecessors, (409), 24 states have call successors, (24), 14 states have call predecessors, (24), 13 states have return successors, (24), 21 states have call predecessors, (24), 21 states have call successors, (24) [2022-02-21 00:02:12,636 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:12,636 INFO L93 Difference]: Finished difference Result 382 states and 481 transitions. [2022-02-21 00:02:12,636 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 481 transitions. [2022-02-21 00:02:12,637 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:12,637 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:12,638 INFO L74 IsIncluded]: Start isIncluded. First operand has 362 states, 324 states have (on average 1.2623456790123457) internal successors, (409), 327 states have internal predecessors, (409), 24 states have call successors, (24), 14 states have call predecessors, (24), 13 states have return successors, (24), 21 states have call predecessors, (24), 21 states have call successors, (24) Second operand 382 states. [2022-02-21 00:02:12,638 INFO L87 Difference]: Start difference. First operand has 362 states, 324 states have (on average 1.2623456790123457) internal successors, (409), 327 states have internal predecessors, (409), 24 states have call successors, (24), 14 states have call predecessors, (24), 13 states have return successors, (24), 21 states have call predecessors, (24), 21 states have call successors, (24) Second operand 382 states. [2022-02-21 00:02:12,646 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:12,646 INFO L93 Difference]: Finished difference Result 382 states and 481 transitions. [2022-02-21 00:02:12,647 INFO L276 IsEmpty]: Start isEmpty. Operand 382 states and 481 transitions. [2022-02-21 00:02:12,647 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:12,647 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:12,648 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:12,648 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:12,648 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 362 states, 324 states have (on average 1.2623456790123457) internal successors, (409), 327 states have internal predecessors, (409), 24 states have call successors, (24), 14 states have call predecessors, (24), 13 states have return successors, (24), 21 states have call predecessors, (24), 21 states have call successors, (24) [2022-02-21 00:02:12,655 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 362 states to 362 states and 457 transitions. [2022-02-21 00:02:12,655 INFO L78 Accepts]: Start accepts. Automaton has 362 states and 457 transitions. Word has length 59 [2022-02-21 00:02:12,655 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:12,655 INFO L470 AbstractCegarLoop]: Abstraction has 362 states and 457 transitions. [2022-02-21 00:02:12,656 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 7 states, 7 states have (on average 7.571428571428571) internal successors, (53), 5 states have internal predecessors, (53), 3 states have call successors, (4), 3 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:12,656 INFO L276 IsEmpty]: Start isEmpty. Operand 362 states and 457 transitions. [2022-02-21 00:02:12,656 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-02-21 00:02:12,657 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:12,657 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:12,657 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable30 [2022-02-21 00:02:12,657 INFO L402 AbstractCegarLoop]: === Iteration 32 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:12,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:12,658 INFO L85 PathProgramCache]: Analyzing trace with hash 731705651, now seen corresponding path program 1 times [2022-02-21 00:02:12,658 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:12,658 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1146222082] [2022-02-21 00:02:12,658 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:12,659 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:12,708 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:12,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-21 00:02:12,731 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:12,757 INFO L290 TraceCheckUtils]: 0: Hoare triple {60009#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {60010#(= |old(~customIrp~0)| ~customIrp~0)} is VALID [2022-02-21 00:02:12,758 INFO L290 TraceCheckUtils]: 1: Hoare triple {60010#(= |old(~customIrp~0)| ~customIrp~0)} assume !(~s~0 == ~MPR3~0); {60010#(= |old(~customIrp~0)| ~customIrp~0)} is VALID [2022-02-21 00:02:12,758 INFO L290 TraceCheckUtils]: 2: Hoare triple {60010#(= |old(~customIrp~0)| ~customIrp~0)} assume 1 == ~customIrp~0;~s~0 := ~NP~0;~customIrp~0 := 0; {60011#(= |old(~customIrp~0)| 1)} is VALID [2022-02-21 00:02:12,759 INFO L290 TraceCheckUtils]: 3: Hoare triple {60011#(= |old(~customIrp~0)| 1)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_9~0 := #t~nondet105;havoc #t~nondet105; {60012#(or (not (= KeWaitForSingleObject_~tmp_ndt_9~0 0)) (not (= |old(~customIrp~0)| KeWaitForSingleObject_~tmp_ndt_9~0)))} is VALID [2022-02-21 00:02:12,759 INFO L290 TraceCheckUtils]: 4: Hoare triple {60012#(or (not (= KeWaitForSingleObject_~tmp_ndt_9~0 0)) (not (= |old(~customIrp~0)| KeWaitForSingleObject_~tmp_ndt_9~0)))} assume 0 == ~tmp_ndt_9~0; {60013#(not (= |old(~customIrp~0)| 0))} is VALID [2022-02-21 00:02:12,759 INFO L290 TraceCheckUtils]: 5: Hoare triple {60013#(not (= |old(~customIrp~0)| 0))} #res := 0; {60013#(not (= |old(~customIrp~0)| 0))} is VALID [2022-02-21 00:02:12,760 INFO L290 TraceCheckUtils]: 6: Hoare triple {60013#(not (= |old(~customIrp~0)| 0))} assume true; {60013#(not (= |old(~customIrp~0)| 0))} is VALID [2022-02-21 00:02:12,761 INFO L284 TraceCheckUtils]: 7: Hoare quadruple {60013#(not (= |old(~customIrp~0)| 0))} {59989#(= ~customIrp~0 0)} #771#return; {59988#false} is VALID [2022-02-21 00:02:12,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-02-21 00:02:12,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:12,774 INFO L290 TraceCheckUtils]: 0: Hoare triple {60014#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {59987#true} is VALID [2022-02-21 00:02:12,774 INFO L290 TraceCheckUtils]: 1: Hoare triple {59987#true} assume !(0 != ~compRegistered~0); {59987#true} is VALID [2022-02-21 00:02:12,774 INFO L290 TraceCheckUtils]: 2: Hoare triple {59987#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {59987#true} is VALID [2022-02-21 00:02:12,774 INFO L290 TraceCheckUtils]: 3: Hoare triple {59987#true} assume 0 == ~tmp_ndt_7~0#1; {59987#true} is VALID [2022-02-21 00:02:12,774 INFO L290 TraceCheckUtils]: 4: Hoare triple {59987#true} ~returnVal2~0#1 := 0; {59987#true} is VALID [2022-02-21 00:02:12,774 INFO L290 TraceCheckUtils]: 5: Hoare triple {59987#true} assume !(~s~0 == ~NP~0); {59987#true} is VALID [2022-02-21 00:02:12,775 INFO L290 TraceCheckUtils]: 6: Hoare triple {59987#true} assume !(~s~0 == ~MPR1~0); {59987#true} is VALID [2022-02-21 00:02:12,775 INFO L290 TraceCheckUtils]: 7: Hoare triple {59987#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {59987#true} is VALID [2022-02-21 00:02:12,775 INFO L290 TraceCheckUtils]: 8: Hoare triple {59987#true} #res#1 := ~returnVal2~0#1; {59987#true} is VALID [2022-02-21 00:02:12,775 INFO L290 TraceCheckUtils]: 9: Hoare triple {59987#true} assume true; {59987#true} is VALID [2022-02-21 00:02:12,775 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {59987#true} {59988#false} #775#return; {59988#false} is VALID [2022-02-21 00:02:12,775 INFO L290 TraceCheckUtils]: 0: Hoare triple {59987#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {59987#true} is VALID [2022-02-21 00:02:12,776 INFO L290 TraceCheckUtils]: 1: Hoare triple {59987#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {59987#true} is VALID [2022-02-21 00:02:12,776 INFO L290 TraceCheckUtils]: 2: Hoare triple {59987#true} assume { :end_inline__BLAST_init } true; {59987#true} is VALID [2022-02-21 00:02:12,776 INFO L290 TraceCheckUtils]: 3: Hoare triple {59987#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {59987#true} is VALID [2022-02-21 00:02:12,776 INFO L290 TraceCheckUtils]: 4: Hoare triple {59987#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {59987#true} is VALID [2022-02-21 00:02:12,776 INFO L290 TraceCheckUtils]: 5: Hoare triple {59987#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,777 INFO L290 TraceCheckUtils]: 6: Hoare triple {59989#(= ~customIrp~0 0)} assume { :end_inline_stub_driver_init } true; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,777 INFO L290 TraceCheckUtils]: 7: Hoare triple {59989#(= ~customIrp~0 0)} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,777 INFO L290 TraceCheckUtils]: 8: Hoare triple {59989#(= ~customIrp~0 0)} assume 3 == main_~tmp_ndt_1~0#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,778 INFO L290 TraceCheckUtils]: 9: Hoare triple {59989#(= ~customIrp~0 0)} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,778 INFO L290 TraceCheckUtils]: 10: Hoare triple {59989#(= ~customIrp~0 0)} assume 1 == ~PagingReferenceCount~0; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,779 INFO L290 TraceCheckUtils]: 11: Hoare triple {59989#(= ~customIrp~0 0)} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,779 INFO L290 TraceCheckUtils]: 12: Hoare triple {59989#(= ~customIrp~0 0)} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,779 INFO L290 TraceCheckUtils]: 13: Hoare triple {59989#(= ~customIrp~0 0)} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,780 INFO L290 TraceCheckUtils]: 14: Hoare triple {59989#(= ~customIrp~0 0)} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,780 INFO L290 TraceCheckUtils]: 15: Hoare triple {59989#(= ~customIrp~0 0)} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,780 INFO L290 TraceCheckUtils]: 16: Hoare triple {59989#(= ~customIrp~0 0)} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 1;assume { :begin_inline_FlQueueIrpToThread } true;FlQueueIrpToThread_#in~Irp#1, FlQueueIrpToThread_#in~DisketteExtension#1 := FloppyPnp_~Irp#1, FloppyPnp_~disketteExtension~0#1;havoc FlQueueIrpToThread_#res#1;havoc FlQueueIrpToThread_#t~nondet4#1, FlQueueIrpToThread_#t~nondet5#1, FlQueueIrpToThread_#t~nondet6#1, FlQueueIrpToThread_#t~nondet7#1, FlQueueIrpToThread_#t~nondet8#1, FlQueueIrpToThread_#t~post9#1, FlQueueIrpToThread_#t~post10#1, FlQueueIrpToThread_#t~post11#1, FlQueueIrpToThread_#t~ret12#1, FlQueueIrpToThread_#t~post13#1, FlQueueIrpToThread_#t~ret14#1, FlQueueIrpToThread_#t~ret15#1, FlQueueIrpToThread_~Irp#1, FlQueueIrpToThread_~DisketteExtension#1, FlQueueIrpToThread_~status~0#1, FlQueueIrpToThread_~threadHandle~0#1, FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1, FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1, FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1, FlQueueIrpToThread_~Irp__IoStatus__Status~0#1, FlQueueIrpToThread_~Irp__IoStatus__Information~0#1, FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1, FlQueueIrpToThread_~ObjAttributes~0#1, FlQueueIrpToThread_~__cil_tmp12~0#1, FlQueueIrpToThread_~__cil_tmp13~0#1;FlQueueIrpToThread_~Irp#1 := FlQueueIrpToThread_#in~Irp#1;FlQueueIrpToThread_~DisketteExtension#1 := FlQueueIrpToThread_#in~DisketteExtension#1;havoc FlQueueIrpToThread_~status~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet4#1 && FlQueueIrpToThread_#t~nondet4#1 <= 2147483647;FlQueueIrpToThread_~threadHandle~0#1 := FlQueueIrpToThread_#t~nondet4#1;havoc FlQueueIrpToThread_#t~nondet4#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet5#1 && FlQueueIrpToThread_#t~nondet5#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1 := FlQueueIrpToThread_#t~nondet5#1;havoc FlQueueIrpToThread_#t~nondet5#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet6#1 && FlQueueIrpToThread_#t~nondet6#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1 := FlQueueIrpToThread_#t~nondet6#1;havoc FlQueueIrpToThread_#t~nondet6#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet7#1 && FlQueueIrpToThread_#t~nondet7#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1 := FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Status~0#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Information~0#1;havoc FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet8#1 && FlQueueIrpToThread_#t~nondet8#1 <= 2147483647;FlQueueIrpToThread_~ObjAttributes~0#1 := FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_~__cil_tmp12~0#1;havoc FlQueueIrpToThread_~__cil_tmp13~0#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,781 INFO L290 TraceCheckUtils]: 17: Hoare triple {59989#(= ~customIrp~0 0)} assume 1 == FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1;~myStatus~0 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Status~0#1 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Information~0#1 := 0;FlQueueIrpToThread_#res#1 := -1073741101; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,781 INFO L290 TraceCheckUtils]: 18: Hoare triple {59989#(= ~customIrp~0 0)} FloppyPnp_#t~ret35#1 := FlQueueIrpToThread_#res#1;assume { :end_inline_FlQueueIrpToThread } true;assume -2147483648 <= FloppyPnp_#t~ret35#1 && FloppyPnp_#t~ret35#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret35#1;havoc FloppyPnp_#t~ret35#1;FloppyPnp_~__cil_tmp29~0#1 := FloppyPnp_~ntStatus~0#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,781 INFO L290 TraceCheckUtils]: 19: Hoare triple {59989#(= ~customIrp~0 0)} assume 259 == FloppyPnp_~__cil_tmp29~0#1; {59989#(= ~customIrp~0 0)} is VALID [2022-02-21 00:02:12,783 INFO L272 TraceCheckUtils]: 20: Hoare triple {59989#(= ~customIrp~0 0)} call FloppyPnp_#t~ret36#1 := KeWaitForSingleObject(FloppyPnp_~disketteExtension__FloppyThread~0#1, ~Executive~0, ~KernelMode~0, 0, 0); {60009#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:12,783 INFO L290 TraceCheckUtils]: 21: Hoare triple {60009#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {60010#(= |old(~customIrp~0)| ~customIrp~0)} is VALID [2022-02-21 00:02:12,784 INFO L290 TraceCheckUtils]: 22: Hoare triple {60010#(= |old(~customIrp~0)| ~customIrp~0)} assume !(~s~0 == ~MPR3~0); {60010#(= |old(~customIrp~0)| ~customIrp~0)} is VALID [2022-02-21 00:02:12,784 INFO L290 TraceCheckUtils]: 23: Hoare triple {60010#(= |old(~customIrp~0)| ~customIrp~0)} assume 1 == ~customIrp~0;~s~0 := ~NP~0;~customIrp~0 := 0; {60011#(= |old(~customIrp~0)| 1)} is VALID [2022-02-21 00:02:12,784 INFO L290 TraceCheckUtils]: 24: Hoare triple {60011#(= |old(~customIrp~0)| 1)} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_9~0 := #t~nondet105;havoc #t~nondet105; {60012#(or (not (= KeWaitForSingleObject_~tmp_ndt_9~0 0)) (not (= |old(~customIrp~0)| KeWaitForSingleObject_~tmp_ndt_9~0)))} is VALID [2022-02-21 00:02:12,785 INFO L290 TraceCheckUtils]: 25: Hoare triple {60012#(or (not (= KeWaitForSingleObject_~tmp_ndt_9~0 0)) (not (= |old(~customIrp~0)| KeWaitForSingleObject_~tmp_ndt_9~0)))} assume 0 == ~tmp_ndt_9~0; {60013#(not (= |old(~customIrp~0)| 0))} is VALID [2022-02-21 00:02:12,785 INFO L290 TraceCheckUtils]: 26: Hoare triple {60013#(not (= |old(~customIrp~0)| 0))} #res := 0; {60013#(not (= |old(~customIrp~0)| 0))} is VALID [2022-02-21 00:02:12,786 INFO L290 TraceCheckUtils]: 27: Hoare triple {60013#(not (= |old(~customIrp~0)| 0))} assume true; {60013#(not (= |old(~customIrp~0)| 0))} is VALID [2022-02-21 00:02:12,787 INFO L284 TraceCheckUtils]: 28: Hoare quadruple {60013#(not (= |old(~customIrp~0)| 0))} {59989#(= ~customIrp~0 0)} #771#return; {59988#false} is VALID [2022-02-21 00:02:12,787 INFO L290 TraceCheckUtils]: 29: Hoare triple {59988#false} assume -2147483648 <= FloppyPnp_#t~ret36#1 && FloppyPnp_#t~ret36#1 <= 2147483647;havoc FloppyPnp_#t~ret36#1; {59988#false} is VALID [2022-02-21 00:02:12,787 INFO L290 TraceCheckUtils]: 30: Hoare triple {59988#false} assume 0 != FloppyPnp_~disketteExtension__FloppyThread~0#1; {59988#false} is VALID [2022-02-21 00:02:12,787 INFO L290 TraceCheckUtils]: 31: Hoare triple {59988#false} FloppyPnp_~disketteExtension__FloppyThread~0#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0; {59988#false} is VALID [2022-02-21 00:02:12,787 INFO L290 TraceCheckUtils]: 32: Hoare triple {59988#false} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {59988#false} is VALID [2022-02-21 00:02:12,788 INFO L290 TraceCheckUtils]: 33: Hoare triple {59988#false} FloppyPnp_#t~post37#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post37#1;havoc FloppyPnp_#t~post37#1;FloppyPnp_#t~post38#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post38#1;havoc FloppyPnp_#t~post38#1; {59988#false} is VALID [2022-02-21 00:02:12,788 INFO L272 TraceCheckUtils]: 34: Hoare triple {59988#false} call FloppyPnp_#t~ret39#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {60014#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:12,788 INFO L290 TraceCheckUtils]: 35: Hoare triple {60014#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {59987#true} is VALID [2022-02-21 00:02:12,788 INFO L290 TraceCheckUtils]: 36: Hoare triple {59987#true} assume !(0 != ~compRegistered~0); {59987#true} is VALID [2022-02-21 00:02:12,788 INFO L290 TraceCheckUtils]: 37: Hoare triple {59987#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {59987#true} is VALID [2022-02-21 00:02:12,788 INFO L290 TraceCheckUtils]: 38: Hoare triple {59987#true} assume 0 == ~tmp_ndt_7~0#1; {59987#true} is VALID [2022-02-21 00:02:12,788 INFO L290 TraceCheckUtils]: 39: Hoare triple {59987#true} ~returnVal2~0#1 := 0; {59987#true} is VALID [2022-02-21 00:02:12,789 INFO L290 TraceCheckUtils]: 40: Hoare triple {59987#true} assume !(~s~0 == ~NP~0); {59987#true} is VALID [2022-02-21 00:02:12,789 INFO L290 TraceCheckUtils]: 41: Hoare triple {59987#true} assume !(~s~0 == ~MPR1~0); {59987#true} is VALID [2022-02-21 00:02:12,789 INFO L290 TraceCheckUtils]: 42: Hoare triple {59987#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {59987#true} is VALID [2022-02-21 00:02:12,789 INFO L290 TraceCheckUtils]: 43: Hoare triple {59987#true} #res#1 := ~returnVal2~0#1; {59987#true} is VALID [2022-02-21 00:02:12,789 INFO L290 TraceCheckUtils]: 44: Hoare triple {59987#true} assume true; {59987#true} is VALID [2022-02-21 00:02:12,789 INFO L284 TraceCheckUtils]: 45: Hoare quadruple {59987#true} {59988#false} #775#return; {59988#false} is VALID [2022-02-21 00:02:12,790 INFO L290 TraceCheckUtils]: 46: Hoare triple {59988#false} assume -2147483648 <= FloppyPnp_#t~ret39#1 && FloppyPnp_#t~ret39#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret39#1;havoc FloppyPnp_#t~ret39#1; {59988#false} is VALID [2022-02-21 00:02:12,790 INFO L290 TraceCheckUtils]: 47: Hoare triple {59988#false} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {59988#false} is VALID [2022-02-21 00:02:12,790 INFO L290 TraceCheckUtils]: 48: Hoare triple {59988#false} assume 0 == ~PagingReferenceCount~0; {59988#false} is VALID [2022-02-21 00:02:12,790 INFO L290 TraceCheckUtils]: 49: Hoare triple {59988#false} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {59988#false} is VALID [2022-02-21 00:02:12,790 INFO L290 TraceCheckUtils]: 50: Hoare triple {59988#false} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {59988#false} is VALID [2022-02-21 00:02:12,790 INFO L290 TraceCheckUtils]: 51: Hoare triple {59988#false} assume !(1 == ~pended~0); {59988#false} is VALID [2022-02-21 00:02:12,790 INFO L290 TraceCheckUtils]: 52: Hoare triple {59988#false} assume !(1 == ~pended~0); {59988#false} is VALID [2022-02-21 00:02:12,791 INFO L290 TraceCheckUtils]: 53: Hoare triple {59988#false} assume ~s~0 != ~UNLOADED~0; {59988#false} is VALID [2022-02-21 00:02:12,791 INFO L290 TraceCheckUtils]: 54: Hoare triple {59988#false} assume -1 != main_~status~1#1; {59988#false} is VALID [2022-02-21 00:02:12,791 INFO L290 TraceCheckUtils]: 55: Hoare triple {59988#false} assume !(~s~0 != ~SKIP2~0); {59988#false} is VALID [2022-02-21 00:02:12,791 INFO L290 TraceCheckUtils]: 56: Hoare triple {59988#false} assume !(1 == ~pended~0); {59988#false} is VALID [2022-02-21 00:02:12,791 INFO L290 TraceCheckUtils]: 57: Hoare triple {59988#false} assume !(~s~0 == ~DC~0); {59988#false} is VALID [2022-02-21 00:02:12,791 INFO L290 TraceCheckUtils]: 58: Hoare triple {59988#false} assume main_~status~1#1 != ~lowerDriverReturn~0; {59988#false} is VALID [2022-02-21 00:02:12,791 INFO L272 TraceCheckUtils]: 59: Hoare triple {59988#false} call errorFn(); {59988#false} is VALID [2022-02-21 00:02:12,792 INFO L290 TraceCheckUtils]: 60: Hoare triple {59988#false} assume !false; {59988#false} is VALID [2022-02-21 00:02:12,792 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:12,792 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:12,792 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1146222082] [2022-02-21 00:02:12,792 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1146222082] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:12,793 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:12,793 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-02-21 00:02:12,793 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [739505890] [2022-02-21 00:02:12,793 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:12,793 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.222222222222222) internal successors, (56), 7 states have internal predecessors, (56), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 61 [2022-02-21 00:02:12,794 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:12,794 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 6.222222222222222) internal successors, (56), 7 states have internal predecessors, (56), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:12,834 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 61 edges. 61 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:12,834 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-21 00:02:12,834 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:12,835 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-21 00:02:12,835 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=53, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:12,835 INFO L87 Difference]: Start difference. First operand 362 states and 457 transitions. Second operand has 9 states, 9 states have (on average 6.222222222222222) internal successors, (56), 7 states have internal predecessors, (56), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:14,035 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:14,035 INFO L93 Difference]: Finished difference Result 487 states and 595 transitions. [2022-02-21 00:02:14,035 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2022-02-21 00:02:14,035 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 6.222222222222222) internal successors, (56), 7 states have internal predecessors, (56), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) Word has length 61 [2022-02-21 00:02:14,035 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:14,035 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.222222222222222) internal successors, (56), 7 states have internal predecessors, (56), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:14,037 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 382 transitions. [2022-02-21 00:02:14,038 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 6.222222222222222) internal successors, (56), 7 states have internal predecessors, (56), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:14,040 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12 states to 12 states and 382 transitions. [2022-02-21 00:02:14,040 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 12 states and 382 transitions. [2022-02-21 00:02:14,310 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 382 edges. 382 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:14,319 INFO L225 Difference]: With dead ends: 487 [2022-02-21 00:02:14,319 INFO L226 Difference]: Without dead ends: 487 [2022-02-21 00:02:14,321 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 6 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 36 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=74, Invalid=198, Unknown=0, NotChecked=0, Total=272 [2022-02-21 00:02:14,321 INFO L933 BasicCegarLoop]: 291 mSDtfsCounter, 363 mSDsluCounter, 874 mSDsCounter, 0 mSdLazyCounter, 344 mSolverCounterSat, 52 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 369 SdHoareTripleChecker+Valid, 1165 SdHoareTripleChecker+Invalid, 396 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 52 IncrementalHoareTripleChecker+Valid, 344 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:14,321 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [369 Valid, 1165 Invalid, 396 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [52 Valid, 344 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:02:14,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 487 states. [2022-02-21 00:02:14,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 487 to 456. [2022-02-21 00:02:14,328 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:14,329 INFO L82 GeneralOperation]: Start isEquivalent. First operand 487 states. Second operand has 456 states, 408 states have (on average 1.2475490196078431) internal successors, (509), 413 states have internal predecessors, (509), 26 states have call successors, (26), 20 states have call predecessors, (26), 21 states have return successors, (27), 23 states have call predecessors, (27), 23 states have call successors, (27) [2022-02-21 00:02:14,329 INFO L74 IsIncluded]: Start isIncluded. First operand 487 states. Second operand has 456 states, 408 states have (on average 1.2475490196078431) internal successors, (509), 413 states have internal predecessors, (509), 26 states have call successors, (26), 20 states have call predecessors, (26), 21 states have return successors, (27), 23 states have call predecessors, (27), 23 states have call successors, (27) [2022-02-21 00:02:14,329 INFO L87 Difference]: Start difference. First operand 487 states. Second operand has 456 states, 408 states have (on average 1.2475490196078431) internal successors, (509), 413 states have internal predecessors, (509), 26 states have call successors, (26), 20 states have call predecessors, (26), 21 states have return successors, (27), 23 states have call predecessors, (27), 23 states have call successors, (27) [2022-02-21 00:02:14,341 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:14,341 INFO L93 Difference]: Finished difference Result 487 states and 595 transitions. [2022-02-21 00:02:14,341 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 595 transitions. [2022-02-21 00:02:14,342 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:14,343 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:14,343 INFO L74 IsIncluded]: Start isIncluded. First operand has 456 states, 408 states have (on average 1.2475490196078431) internal successors, (509), 413 states have internal predecessors, (509), 26 states have call successors, (26), 20 states have call predecessors, (26), 21 states have return successors, (27), 23 states have call predecessors, (27), 23 states have call successors, (27) Second operand 487 states. [2022-02-21 00:02:14,345 INFO L87 Difference]: Start difference. First operand has 456 states, 408 states have (on average 1.2475490196078431) internal successors, (509), 413 states have internal predecessors, (509), 26 states have call successors, (26), 20 states have call predecessors, (26), 21 states have return successors, (27), 23 states have call predecessors, (27), 23 states have call successors, (27) Second operand 487 states. [2022-02-21 00:02:14,357 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:14,357 INFO L93 Difference]: Finished difference Result 487 states and 595 transitions. [2022-02-21 00:02:14,358 INFO L276 IsEmpty]: Start isEmpty. Operand 487 states and 595 transitions. [2022-02-21 00:02:14,358 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:14,358 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:14,359 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:14,359 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:14,359 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 456 states, 408 states have (on average 1.2475490196078431) internal successors, (509), 413 states have internal predecessors, (509), 26 states have call successors, (26), 20 states have call predecessors, (26), 21 states have return successors, (27), 23 states have call predecessors, (27), 23 states have call successors, (27) [2022-02-21 00:02:14,370 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 456 states to 456 states and 562 transitions. [2022-02-21 00:02:14,370 INFO L78 Accepts]: Start accepts. Automaton has 456 states and 562 transitions. Word has length 61 [2022-02-21 00:02:14,371 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:14,371 INFO L470 AbstractCegarLoop]: Abstraction has 456 states and 562 transitions. [2022-02-21 00:02:14,371 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 6.222222222222222) internal successors, (56), 7 states have internal predecessors, (56), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 1 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:14,371 INFO L276 IsEmpty]: Start isEmpty. Operand 456 states and 562 transitions. [2022-02-21 00:02:14,372 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 63 [2022-02-21 00:02:14,372 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:14,372 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:14,372 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable31 [2022-02-21 00:02:14,373 INFO L402 AbstractCegarLoop]: === Iteration 33 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:14,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:14,373 INFO L85 PathProgramCache]: Analyzing trace with hash 1386771644, now seen corresponding path program 1 times [2022-02-21 00:02:14,373 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:14,373 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [526702658] [2022-02-21 00:02:14,374 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:14,374 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:14,401 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:14,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-02-21 00:02:14,437 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:14,439 INFO L290 TraceCheckUtils]: 0: Hoare triple {61979#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {61953#true} is VALID [2022-02-21 00:02:14,439 INFO L290 TraceCheckUtils]: 1: Hoare triple {61953#true} assume !(~s~0 == ~MPR3~0); {61953#true} is VALID [2022-02-21 00:02:14,439 INFO L290 TraceCheckUtils]: 2: Hoare triple {61953#true} assume !(1 == ~customIrp~0); {61953#true} is VALID [2022-02-21 00:02:14,440 INFO L290 TraceCheckUtils]: 3: Hoare triple {61953#true} assume !(~s~0 == ~MPR3~0); {61953#true} is VALID [2022-02-21 00:02:14,440 INFO L290 TraceCheckUtils]: 4: Hoare triple {61953#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_9~0 := #t~nondet105;havoc #t~nondet105; {61953#true} is VALID [2022-02-21 00:02:14,440 INFO L290 TraceCheckUtils]: 5: Hoare triple {61953#true} assume 0 == ~tmp_ndt_9~0; {61953#true} is VALID [2022-02-21 00:02:14,440 INFO L290 TraceCheckUtils]: 6: Hoare triple {61953#true} #res := 0; {61953#true} is VALID [2022-02-21 00:02:14,440 INFO L290 TraceCheckUtils]: 7: Hoare triple {61953#true} assume true; {61953#true} is VALID [2022-02-21 00:02:14,440 INFO L284 TraceCheckUtils]: 8: Hoare quadruple {61953#true} {61953#true} #771#return; {61953#true} is VALID [2022-02-21 00:02:14,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 35 [2022-02-21 00:02:14,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:14,467 INFO L290 TraceCheckUtils]: 0: Hoare triple {61980#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {61953#true} is VALID [2022-02-21 00:02:14,467 INFO L290 TraceCheckUtils]: 1: Hoare triple {61953#true} assume !(0 != ~compRegistered~0); {61953#true} is VALID [2022-02-21 00:02:14,467 INFO L290 TraceCheckUtils]: 2: Hoare triple {61953#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {61953#true} is VALID [2022-02-21 00:02:14,467 INFO L290 TraceCheckUtils]: 3: Hoare triple {61953#true} assume 0 == ~tmp_ndt_7~0#1; {61953#true} is VALID [2022-02-21 00:02:14,468 INFO L290 TraceCheckUtils]: 4: Hoare triple {61953#true} ~returnVal2~0#1 := 0; {61953#true} is VALID [2022-02-21 00:02:14,468 INFO L290 TraceCheckUtils]: 5: Hoare triple {61953#true} assume !(~s~0 == ~NP~0); {61953#true} is VALID [2022-02-21 00:02:14,468 INFO L290 TraceCheckUtils]: 6: Hoare triple {61953#true} assume !(~s~0 == ~MPR1~0); {61953#true} is VALID [2022-02-21 00:02:14,468 INFO L290 TraceCheckUtils]: 7: Hoare triple {61953#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {61981#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:14,469 INFO L290 TraceCheckUtils]: 8: Hoare triple {61981#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:14,469 INFO L290 TraceCheckUtils]: 9: Hoare triple {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:14,470 INFO L284 TraceCheckUtils]: 10: Hoare quadruple {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {61953#true} #775#return; {61975#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret39#1|)} is VALID [2022-02-21 00:02:14,470 INFO L290 TraceCheckUtils]: 0: Hoare triple {61953#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {61953#true} is VALID [2022-02-21 00:02:14,470 INFO L290 TraceCheckUtils]: 1: Hoare triple {61953#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {61953#true} is VALID [2022-02-21 00:02:14,470 INFO L290 TraceCheckUtils]: 2: Hoare triple {61953#true} assume { :end_inline__BLAST_init } true; {61953#true} is VALID [2022-02-21 00:02:14,470 INFO L290 TraceCheckUtils]: 3: Hoare triple {61953#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {61953#true} is VALID [2022-02-21 00:02:14,471 INFO L290 TraceCheckUtils]: 4: Hoare triple {61953#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {61953#true} is VALID [2022-02-21 00:02:14,471 INFO L290 TraceCheckUtils]: 5: Hoare triple {61953#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {61953#true} is VALID [2022-02-21 00:02:14,471 INFO L290 TraceCheckUtils]: 6: Hoare triple {61953#true} assume { :end_inline_stub_driver_init } true; {61953#true} is VALID [2022-02-21 00:02:14,471 INFO L290 TraceCheckUtils]: 7: Hoare triple {61953#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {61953#true} is VALID [2022-02-21 00:02:14,471 INFO L290 TraceCheckUtils]: 8: Hoare triple {61953#true} assume 3 == main_~tmp_ndt_1~0#1; {61953#true} is VALID [2022-02-21 00:02:14,471 INFO L290 TraceCheckUtils]: 9: Hoare triple {61953#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {61953#true} is VALID [2022-02-21 00:02:14,472 INFO L290 TraceCheckUtils]: 10: Hoare triple {61953#true} assume 1 == ~PagingReferenceCount~0; {61953#true} is VALID [2022-02-21 00:02:14,472 INFO L290 TraceCheckUtils]: 11: Hoare triple {61953#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {61953#true} is VALID [2022-02-21 00:02:14,472 INFO L290 TraceCheckUtils]: 12: Hoare triple {61953#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {61953#true} is VALID [2022-02-21 00:02:14,472 INFO L290 TraceCheckUtils]: 13: Hoare triple {61953#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {61953#true} is VALID [2022-02-21 00:02:14,472 INFO L290 TraceCheckUtils]: 14: Hoare triple {61953#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {61953#true} is VALID [2022-02-21 00:02:14,472 INFO L290 TraceCheckUtils]: 15: Hoare triple {61953#true} assume 5 == FloppyPnp_~irpSp__MinorFunction~0#1; {61953#true} is VALID [2022-02-21 00:02:14,472 INFO L290 TraceCheckUtils]: 16: Hoare triple {61953#true} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 1;assume { :begin_inline_FlQueueIrpToThread } true;FlQueueIrpToThread_#in~Irp#1, FlQueueIrpToThread_#in~DisketteExtension#1 := FloppyPnp_~Irp#1, FloppyPnp_~disketteExtension~0#1;havoc FlQueueIrpToThread_#res#1;havoc FlQueueIrpToThread_#t~nondet4#1, FlQueueIrpToThread_#t~nondet5#1, FlQueueIrpToThread_#t~nondet6#1, FlQueueIrpToThread_#t~nondet7#1, FlQueueIrpToThread_#t~nondet8#1, FlQueueIrpToThread_#t~post9#1, FlQueueIrpToThread_#t~post10#1, FlQueueIrpToThread_#t~post11#1, FlQueueIrpToThread_#t~ret12#1, FlQueueIrpToThread_#t~post13#1, FlQueueIrpToThread_#t~ret14#1, FlQueueIrpToThread_#t~ret15#1, FlQueueIrpToThread_~Irp#1, FlQueueIrpToThread_~DisketteExtension#1, FlQueueIrpToThread_~status~0#1, FlQueueIrpToThread_~threadHandle~0#1, FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1, FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1, FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1, FlQueueIrpToThread_~Irp__IoStatus__Status~0#1, FlQueueIrpToThread_~Irp__IoStatus__Information~0#1, FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1, FlQueueIrpToThread_~ObjAttributes~0#1, FlQueueIrpToThread_~__cil_tmp12~0#1, FlQueueIrpToThread_~__cil_tmp13~0#1;FlQueueIrpToThread_~Irp#1 := FlQueueIrpToThread_#in~Irp#1;FlQueueIrpToThread_~DisketteExtension#1 := FlQueueIrpToThread_#in~DisketteExtension#1;havoc FlQueueIrpToThread_~status~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet4#1 && FlQueueIrpToThread_#t~nondet4#1 <= 2147483647;FlQueueIrpToThread_~threadHandle~0#1 := FlQueueIrpToThread_#t~nondet4#1;havoc FlQueueIrpToThread_#t~nondet4#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet5#1 && FlQueueIrpToThread_#t~nondet5#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1 := FlQueueIrpToThread_#t~nondet5#1;havoc FlQueueIrpToThread_#t~nondet5#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet6#1 && FlQueueIrpToThread_#t~nondet6#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__ThreadReferenceCount~0#1 := FlQueueIrpToThread_#t~nondet6#1;havoc FlQueueIrpToThread_#t~nondet6#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet7#1 && FlQueueIrpToThread_#t~nondet7#1 <= 2147483647;FlQueueIrpToThread_~DisketteExtension__FloppyThread~0#1 := FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_#t~nondet7#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Status~0#1;havoc FlQueueIrpToThread_~Irp__IoStatus__Information~0#1;havoc FlQueueIrpToThread_~Irp__Tail__Overlay__CurrentStackLocation__Control~0#1;assume -2147483648 <= FlQueueIrpToThread_#t~nondet8#1 && FlQueueIrpToThread_#t~nondet8#1 <= 2147483647;FlQueueIrpToThread_~ObjAttributes~0#1 := FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_#t~nondet8#1;havoc FlQueueIrpToThread_~__cil_tmp12~0#1;havoc FlQueueIrpToThread_~__cil_tmp13~0#1; {61953#true} is VALID [2022-02-21 00:02:14,473 INFO L290 TraceCheckUtils]: 17: Hoare triple {61953#true} assume 1 == FlQueueIrpToThread_~DisketteExtension__PoweringDown~0#1;~myStatus~0 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Status~0#1 := -1073741101;FlQueueIrpToThread_~Irp__IoStatus__Information~0#1 := 0;FlQueueIrpToThread_#res#1 := -1073741101; {61953#true} is VALID [2022-02-21 00:02:14,473 INFO L290 TraceCheckUtils]: 18: Hoare triple {61953#true} FloppyPnp_#t~ret35#1 := FlQueueIrpToThread_#res#1;assume { :end_inline_FlQueueIrpToThread } true;assume -2147483648 <= FloppyPnp_#t~ret35#1 && FloppyPnp_#t~ret35#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret35#1;havoc FloppyPnp_#t~ret35#1;FloppyPnp_~__cil_tmp29~0#1 := FloppyPnp_~ntStatus~0#1; {61953#true} is VALID [2022-02-21 00:02:14,473 INFO L290 TraceCheckUtils]: 19: Hoare triple {61953#true} assume 259 == FloppyPnp_~__cil_tmp29~0#1; {61953#true} is VALID [2022-02-21 00:02:14,474 INFO L272 TraceCheckUtils]: 20: Hoare triple {61953#true} call FloppyPnp_#t~ret36#1 := KeWaitForSingleObject(FloppyPnp_~disketteExtension__FloppyThread~0#1, ~Executive~0, ~KernelMode~0, 0, 0); {61979#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:14,474 INFO L290 TraceCheckUtils]: 21: Hoare triple {61979#(and (= |old(~customIrp~0)| ~customIrp~0) (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~s~0 |old(~s~0)|))} ~Object := #in~Object;~WaitReason := #in~WaitReason;~WaitMode := #in~WaitMode;~Alertable := #in~Alertable;~Timeout := #in~Timeout; {61953#true} is VALID [2022-02-21 00:02:14,474 INFO L290 TraceCheckUtils]: 22: Hoare triple {61953#true} assume !(~s~0 == ~MPR3~0); {61953#true} is VALID [2022-02-21 00:02:14,474 INFO L290 TraceCheckUtils]: 23: Hoare triple {61953#true} assume !(1 == ~customIrp~0); {61953#true} is VALID [2022-02-21 00:02:14,474 INFO L290 TraceCheckUtils]: 24: Hoare triple {61953#true} assume !(~s~0 == ~MPR3~0); {61953#true} is VALID [2022-02-21 00:02:14,475 INFO L290 TraceCheckUtils]: 25: Hoare triple {61953#true} havoc ~tmp_ndt_9~0;assume -2147483648 <= #t~nondet105 && #t~nondet105 <= 2147483647;~tmp_ndt_9~0 := #t~nondet105;havoc #t~nondet105; {61953#true} is VALID [2022-02-21 00:02:14,475 INFO L290 TraceCheckUtils]: 26: Hoare triple {61953#true} assume 0 == ~tmp_ndt_9~0; {61953#true} is VALID [2022-02-21 00:02:14,475 INFO L290 TraceCheckUtils]: 27: Hoare triple {61953#true} #res := 0; {61953#true} is VALID [2022-02-21 00:02:14,475 INFO L290 TraceCheckUtils]: 28: Hoare triple {61953#true} assume true; {61953#true} is VALID [2022-02-21 00:02:14,475 INFO L284 TraceCheckUtils]: 29: Hoare quadruple {61953#true} {61953#true} #771#return; {61953#true} is VALID [2022-02-21 00:02:14,475 INFO L290 TraceCheckUtils]: 30: Hoare triple {61953#true} assume -2147483648 <= FloppyPnp_#t~ret36#1 && FloppyPnp_#t~ret36#1 <= 2147483647;havoc FloppyPnp_#t~ret36#1; {61953#true} is VALID [2022-02-21 00:02:14,476 INFO L290 TraceCheckUtils]: 31: Hoare triple {61953#true} assume 0 != FloppyPnp_~disketteExtension__FloppyThread~0#1; {61953#true} is VALID [2022-02-21 00:02:14,476 INFO L290 TraceCheckUtils]: 32: Hoare triple {61953#true} FloppyPnp_~disketteExtension__FloppyThread~0#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0; {61953#true} is VALID [2022-02-21 00:02:14,476 INFO L290 TraceCheckUtils]: 33: Hoare triple {61953#true} assume ~s~0 == ~NP~0;~s~0 := ~SKIP1~0; {61953#true} is VALID [2022-02-21 00:02:14,476 INFO L290 TraceCheckUtils]: 34: Hoare triple {61953#true} FloppyPnp_#t~post37#1 := FloppyPnp_~Irp__CurrentLocation~0#1;FloppyPnp_~Irp__CurrentLocation~0#1 := 1 + FloppyPnp_#t~post37#1;havoc FloppyPnp_#t~post37#1;FloppyPnp_#t~post38#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := 1 + FloppyPnp_#t~post38#1;havoc FloppyPnp_#t~post38#1; {61953#true} is VALID [2022-02-21 00:02:14,477 INFO L272 TraceCheckUtils]: 35: Hoare triple {61953#true} call FloppyPnp_#t~ret39#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {61980#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:14,477 INFO L290 TraceCheckUtils]: 36: Hoare triple {61980#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {61953#true} is VALID [2022-02-21 00:02:14,477 INFO L290 TraceCheckUtils]: 37: Hoare triple {61953#true} assume !(0 != ~compRegistered~0); {61953#true} is VALID [2022-02-21 00:02:14,477 INFO L290 TraceCheckUtils]: 38: Hoare triple {61953#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {61953#true} is VALID [2022-02-21 00:02:14,477 INFO L290 TraceCheckUtils]: 39: Hoare triple {61953#true} assume 0 == ~tmp_ndt_7~0#1; {61953#true} is VALID [2022-02-21 00:02:14,477 INFO L290 TraceCheckUtils]: 40: Hoare triple {61953#true} ~returnVal2~0#1 := 0; {61953#true} is VALID [2022-02-21 00:02:14,478 INFO L290 TraceCheckUtils]: 41: Hoare triple {61953#true} assume !(~s~0 == ~NP~0); {61953#true} is VALID [2022-02-21 00:02:14,478 INFO L290 TraceCheckUtils]: 42: Hoare triple {61953#true} assume !(~s~0 == ~MPR1~0); {61953#true} is VALID [2022-02-21 00:02:14,478 INFO L290 TraceCheckUtils]: 43: Hoare triple {61953#true} assume ~s~0 == ~SKIP1~0;~s~0 := ~SKIP2~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {61981#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} is VALID [2022-02-21 00:02:14,478 INFO L290 TraceCheckUtils]: 44: Hoare triple {61981#(= ~lowerDriverReturn~0 |IofCallDriver_~returnVal2~0#1|)} #res#1 := ~returnVal2~0#1; {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:14,479 INFO L290 TraceCheckUtils]: 45: Hoare triple {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} assume true; {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} is VALID [2022-02-21 00:02:14,480 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {61982#(= ~lowerDriverReturn~0 |IofCallDriver_#res#1|)} {61953#true} #775#return; {61975#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret39#1|)} is VALID [2022-02-21 00:02:14,480 INFO L290 TraceCheckUtils]: 47: Hoare triple {61975#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#t~ret39#1|)} assume -2147483648 <= FloppyPnp_#t~ret39#1 && FloppyPnp_#t~ret39#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret39#1;havoc FloppyPnp_#t~ret39#1; {61976#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,480 INFO L290 TraceCheckUtils]: 48: Hoare triple {61976#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {61976#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,481 INFO L290 TraceCheckUtils]: 49: Hoare triple {61976#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} assume 0 == ~PagingReferenceCount~0; {61976#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,481 INFO L290 TraceCheckUtils]: 50: Hoare triple {61976#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| ~lowerDriverReturn~0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {61977#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} is VALID [2022-02-21 00:02:14,481 INFO L290 TraceCheckUtils]: 51: Hoare triple {61977#(= ~lowerDriverReturn~0 |ULTIMATE.start_FloppyPnp_#res#1|)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,482 INFO L290 TraceCheckUtils]: 52: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,482 INFO L290 TraceCheckUtils]: 53: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,482 INFO L290 TraceCheckUtils]: 54: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume ~s~0 != ~UNLOADED~0; {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,483 INFO L290 TraceCheckUtils]: 55: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume -1 != main_~status~1#1; {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,483 INFO L290 TraceCheckUtils]: 56: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 != ~SKIP2~0); {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,483 INFO L290 TraceCheckUtils]: 57: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(1 == ~pended~0); {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,484 INFO L290 TraceCheckUtils]: 58: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume !(~s~0 == ~DC~0); {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} is VALID [2022-02-21 00:02:14,484 INFO L290 TraceCheckUtils]: 59: Hoare triple {61978#(= |ULTIMATE.start_main_~status~1#1| ~lowerDriverReturn~0)} assume main_~status~1#1 != ~lowerDriverReturn~0; {61954#false} is VALID [2022-02-21 00:02:14,484 INFO L272 TraceCheckUtils]: 60: Hoare triple {61954#false} call errorFn(); {61954#false} is VALID [2022-02-21 00:02:14,484 INFO L290 TraceCheckUtils]: 61: Hoare triple {61954#false} assume !false; {61954#false} is VALID [2022-02-21 00:02:14,485 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:14,485 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:14,485 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [526702658] [2022-02-21 00:02:14,485 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [526702658] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:14,486 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:14,487 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-21 00:02:14,487 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [288517203] [2022-02-21 00:02:14,487 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:14,487 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.7) internal successors, (57), 7 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 62 [2022-02-21 00:02:14,488 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:14,488 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.7) internal successors, (57), 7 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:14,527 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 62 edges. 62 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:14,527 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-21 00:02:14,527 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:14,530 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-21 00:02:14,530 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=17, Invalid=73, Unknown=0, NotChecked=0, Total=90 [2022-02-21 00:02:14,530 INFO L87 Difference]: Start difference. First operand 456 states and 562 transitions. Second operand has 10 states, 10 states have (on average 5.7) internal successors, (57), 7 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:15,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:15,711 INFO L93 Difference]: Finished difference Result 455 states and 560 transitions. [2022-02-21 00:02:15,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-21 00:02:15,711 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.7) internal successors, (57), 7 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 62 [2022-02-21 00:02:15,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:15,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.7) internal successors, (57), 7 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:15,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 261 transitions. [2022-02-21 00:02:15,713 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.7) internal successors, (57), 7 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:15,715 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 261 transitions. [2022-02-21 00:02:15,715 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 261 transitions. [2022-02-21 00:02:15,887 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 261 edges. 261 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:15,891 INFO L225 Difference]: With dead ends: 455 [2022-02-21 00:02:15,891 INFO L226 Difference]: Without dead ends: 343 [2022-02-21 00:02:15,891 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=35, Invalid=147, Unknown=0, NotChecked=0, Total=182 [2022-02-21 00:02:15,892 INFO L933 BasicCegarLoop]: 225 mSDtfsCounter, 97 mSDsluCounter, 1381 mSDsCounter, 0 mSdLazyCounter, 465 mSolverCounterSat, 27 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 97 SdHoareTripleChecker+Valid, 1606 SdHoareTripleChecker+Invalid, 492 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 27 IncrementalHoareTripleChecker+Valid, 465 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:15,892 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [97 Valid, 1606 Invalid, 492 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [27 Valid, 465 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2022-02-21 00:02:15,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-02-21 00:02:15,896 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-02-21 00:02:15,896 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:15,897 INFO L82 GeneralOperation]: Start isEquivalent. First operand 343 states. Second operand has 343 states, 304 states have (on average 1.2532894736842106) internal successors, (381), 308 states have internal predecessors, (381), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:15,897 INFO L74 IsIncluded]: Start isIncluded. First operand 343 states. Second operand has 343 states, 304 states have (on average 1.2532894736842106) internal successors, (381), 308 states have internal predecessors, (381), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:15,898 INFO L87 Difference]: Start difference. First operand 343 states. Second operand has 343 states, 304 states have (on average 1.2532894736842106) internal successors, (381), 308 states have internal predecessors, (381), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:15,904 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:15,904 INFO L93 Difference]: Finished difference Result 343 states and 425 transitions. [2022-02-21 00:02:15,904 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 425 transitions. [2022-02-21 00:02:15,905 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:15,905 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:15,906 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 304 states have (on average 1.2532894736842106) internal successors, (381), 308 states have internal predecessors, (381), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) Second operand 343 states. [2022-02-21 00:02:15,906 INFO L87 Difference]: Start difference. First operand has 343 states, 304 states have (on average 1.2532894736842106) internal successors, (381), 308 states have internal predecessors, (381), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) Second operand 343 states. [2022-02-21 00:02:15,912 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:15,912 INFO L93 Difference]: Finished difference Result 343 states and 425 transitions. [2022-02-21 00:02:15,912 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 425 transitions. [2022-02-21 00:02:15,913 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:15,913 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:15,913 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:15,913 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:15,914 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 304 states have (on average 1.2532894736842106) internal successors, (381), 308 states have internal predecessors, (381), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:15,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 425 transitions. [2022-02-21 00:02:15,920 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 425 transitions. Word has length 62 [2022-02-21 00:02:15,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:15,920 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 425 transitions. [2022-02-21 00:02:15,921 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.7) internal successors, (57), 7 states have internal predecessors, (57), 2 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:15,921 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 425 transitions. [2022-02-21 00:02:15,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-02-21 00:02:15,922 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:15,922 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:15,922 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable32 [2022-02-21 00:02:15,922 INFO L402 AbstractCegarLoop]: === Iteration 34 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:15,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:15,923 INFO L85 PathProgramCache]: Analyzing trace with hash -643436666, now seen corresponding path program 1 times [2022-02-21 00:02:15,923 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:15,923 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1537120204] [2022-02-21 00:02:15,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:15,923 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:15,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:15,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-21 00:02:15,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:16,020 INFO L290 TraceCheckUtils]: 0: Hoare triple {63504#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {63478#true} is VALID [2022-02-21 00:02:16,020 INFO L290 TraceCheckUtils]: 1: Hoare triple {63478#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {63478#true} is VALID [2022-02-21 00:02:16,021 INFO L290 TraceCheckUtils]: 2: Hoare triple {63478#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {63478#true} is VALID [2022-02-21 00:02:16,021 INFO L290 TraceCheckUtils]: 3: Hoare triple {63478#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {63478#true} is VALID [2022-02-21 00:02:16,021 INFO L290 TraceCheckUtils]: 4: Hoare triple {63478#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {63478#true} is VALID [2022-02-21 00:02:16,021 INFO L290 TraceCheckUtils]: 5: Hoare triple {63478#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {63478#true} is VALID [2022-02-21 00:02:16,021 INFO L290 TraceCheckUtils]: 6: Hoare triple {63478#true} assume { :end_inline_stubMoreProcessingRequired } true; {63478#true} is VALID [2022-02-21 00:02:16,021 INFO L290 TraceCheckUtils]: 7: Hoare triple {63478#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {63478#true} is VALID [2022-02-21 00:02:16,021 INFO L290 TraceCheckUtils]: 8: Hoare triple {63478#true} assume 0 == ~tmp_ndt_7~0#1; {63478#true} is VALID [2022-02-21 00:02:16,022 INFO L290 TraceCheckUtils]: 9: Hoare triple {63478#true} ~returnVal2~0#1 := 0; {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,022 INFO L290 TraceCheckUtils]: 10: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(~s~0 == ~NP~0); {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,023 INFO L290 TraceCheckUtils]: 11: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume ~s~0 == ~MPR1~0; {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,023 INFO L290 TraceCheckUtils]: 12: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,024 INFO L290 TraceCheckUtils]: 13: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} #res#1 := ~returnVal2~0#1; {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:02:16,024 INFO L290 TraceCheckUtils]: 14: Hoare triple {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} assume true; {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:02:16,025 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} {63478#true} #787#return; {63496#(= |ULTIMATE.start_FloppyPnp_#t~ret43#1| 0)} is VALID [2022-02-21 00:02:16,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-21 00:02:16,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:16,035 INFO L290 TraceCheckUtils]: 0: Hoare triple {63507#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {63478#true} is VALID [2022-02-21 00:02:16,036 INFO L290 TraceCheckUtils]: 1: Hoare triple {63478#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {63478#true} is VALID [2022-02-21 00:02:16,036 INFO L290 TraceCheckUtils]: 2: Hoare triple {63478#true} assume true; {63478#true} is VALID [2022-02-21 00:02:16,036 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {63478#true} {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} #791#return; {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} is VALID [2022-02-21 00:02:16,037 INFO L290 TraceCheckUtils]: 0: Hoare triple {63478#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {63478#true} is VALID [2022-02-21 00:02:16,037 INFO L290 TraceCheckUtils]: 1: Hoare triple {63478#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63478#true} is VALID [2022-02-21 00:02:16,037 INFO L290 TraceCheckUtils]: 2: Hoare triple {63478#true} assume { :end_inline__BLAST_init } true; {63478#true} is VALID [2022-02-21 00:02:16,037 INFO L290 TraceCheckUtils]: 3: Hoare triple {63478#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {63478#true} is VALID [2022-02-21 00:02:16,037 INFO L290 TraceCheckUtils]: 4: Hoare triple {63478#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {63478#true} is VALID [2022-02-21 00:02:16,037 INFO L290 TraceCheckUtils]: 5: Hoare triple {63478#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {63478#true} is VALID [2022-02-21 00:02:16,037 INFO L290 TraceCheckUtils]: 6: Hoare triple {63478#true} assume { :end_inline_stub_driver_init } true; {63478#true} is VALID [2022-02-21 00:02:16,038 INFO L290 TraceCheckUtils]: 7: Hoare triple {63478#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {63478#true} is VALID [2022-02-21 00:02:16,038 INFO L290 TraceCheckUtils]: 8: Hoare triple {63478#true} assume 3 == main_~tmp_ndt_1~0#1; {63478#true} is VALID [2022-02-21 00:02:16,038 INFO L290 TraceCheckUtils]: 9: Hoare triple {63478#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {63478#true} is VALID [2022-02-21 00:02:16,038 INFO L290 TraceCheckUtils]: 10: Hoare triple {63478#true} assume 1 == ~PagingReferenceCount~0; {63478#true} is VALID [2022-02-21 00:02:16,038 INFO L290 TraceCheckUtils]: 11: Hoare triple {63478#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {63478#true} is VALID [2022-02-21 00:02:16,038 INFO L290 TraceCheckUtils]: 12: Hoare triple {63478#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {63478#true} is VALID [2022-02-21 00:02:16,039 INFO L290 TraceCheckUtils]: 13: Hoare triple {63478#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {63478#true} is VALID [2022-02-21 00:02:16,039 INFO L290 TraceCheckUtils]: 14: Hoare triple {63478#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {63478#true} is VALID [2022-02-21 00:02:16,039 INFO L290 TraceCheckUtils]: 15: Hoare triple {63478#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {63478#true} is VALID [2022-02-21 00:02:16,039 INFO L290 TraceCheckUtils]: 16: Hoare triple {63478#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {63478#true} is VALID [2022-02-21 00:02:16,039 INFO L290 TraceCheckUtils]: 17: Hoare triple {63478#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {63478#true} is VALID [2022-02-21 00:02:16,039 INFO L290 TraceCheckUtils]: 18: Hoare triple {63478#true} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0;FloppyPnp_~irpSp___0~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~nextIrpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~nextIrpSp__Control~0#1 := 0; {63478#true} is VALID [2022-02-21 00:02:16,040 INFO L290 TraceCheckUtils]: 19: Hoare triple {63478#true} assume !(~s~0 != ~NP~0); {63478#true} is VALID [2022-02-21 00:02:16,040 INFO L290 TraceCheckUtils]: 20: Hoare triple {63478#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {63478#true} is VALID [2022-02-21 00:02:16,040 INFO L290 TraceCheckUtils]: 21: Hoare triple {63478#true} FloppyPnp_~irpSp___1~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~irpSp__Context~0#1 := FloppyPnp_~doneEvent~0#1;FloppyPnp_~irpSp__Control~0#1 := 224; {63478#true} is VALID [2022-02-21 00:02:16,041 INFO L272 TraceCheckUtils]: 22: Hoare triple {63478#true} call FloppyPnp_#t~ret43#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {63504#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:16,041 INFO L290 TraceCheckUtils]: 23: Hoare triple {63504#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {63478#true} is VALID [2022-02-21 00:02:16,041 INFO L290 TraceCheckUtils]: 24: Hoare triple {63478#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {63478#true} is VALID [2022-02-21 00:02:16,041 INFO L290 TraceCheckUtils]: 25: Hoare triple {63478#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {63478#true} is VALID [2022-02-21 00:02:16,041 INFO L290 TraceCheckUtils]: 26: Hoare triple {63478#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {63478#true} is VALID [2022-02-21 00:02:16,041 INFO L290 TraceCheckUtils]: 27: Hoare triple {63478#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {63478#true} is VALID [2022-02-21 00:02:16,042 INFO L290 TraceCheckUtils]: 28: Hoare triple {63478#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {63478#true} is VALID [2022-02-21 00:02:16,042 INFO L290 TraceCheckUtils]: 29: Hoare triple {63478#true} assume { :end_inline_stubMoreProcessingRequired } true; {63478#true} is VALID [2022-02-21 00:02:16,042 INFO L290 TraceCheckUtils]: 30: Hoare triple {63478#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {63478#true} is VALID [2022-02-21 00:02:16,042 INFO L290 TraceCheckUtils]: 31: Hoare triple {63478#true} assume 0 == ~tmp_ndt_7~0#1; {63478#true} is VALID [2022-02-21 00:02:16,042 INFO L290 TraceCheckUtils]: 32: Hoare triple {63478#true} ~returnVal2~0#1 := 0; {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,043 INFO L290 TraceCheckUtils]: 33: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(~s~0 == ~NP~0); {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,043 INFO L290 TraceCheckUtils]: 34: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume ~s~0 == ~MPR1~0; {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,044 INFO L290 TraceCheckUtils]: 35: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} is VALID [2022-02-21 00:02:16,044 INFO L290 TraceCheckUtils]: 36: Hoare triple {63505#(and (<= |IofCallDriver_~returnVal2~0#1| 0) (<= 0 |IofCallDriver_~returnVal2~0#1|))} #res#1 := ~returnVal2~0#1; {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:02:16,045 INFO L290 TraceCheckUtils]: 37: Hoare triple {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} assume true; {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} is VALID [2022-02-21 00:02:16,046 INFO L284 TraceCheckUtils]: 38: Hoare quadruple {63506#(and (<= |IofCallDriver_#res#1| 0) (<= 0 |IofCallDriver_#res#1|))} {63478#true} #787#return; {63496#(= |ULTIMATE.start_FloppyPnp_#t~ret43#1| 0)} is VALID [2022-02-21 00:02:16,046 INFO L290 TraceCheckUtils]: 39: Hoare triple {63496#(= |ULTIMATE.start_FloppyPnp_#t~ret43#1| 0)} assume -2147483648 <= FloppyPnp_#t~ret43#1 && FloppyPnp_#t~ret43#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret43#1;havoc FloppyPnp_#t~ret43#1;FloppyPnp_~__cil_tmp30~0#1 := FloppyPnp_~ntStatus~0#1; {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} is VALID [2022-02-21 00:02:16,046 INFO L290 TraceCheckUtils]: 40: Hoare triple {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} assume !(259 == FloppyPnp_~__cil_tmp30~0#1); {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} is VALID [2022-02-21 00:02:16,047 INFO L290 TraceCheckUtils]: 41: Hoare triple {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := FloppyPnp_~ntStatus~0#1;~myStatus~0 := FloppyPnp_~ntStatus~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0; {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} is VALID [2022-02-21 00:02:16,048 INFO L272 TraceCheckUtils]: 42: Hoare triple {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {63507#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:02:16,048 INFO L290 TraceCheckUtils]: 43: Hoare triple {63507#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {63478#true} is VALID [2022-02-21 00:02:16,048 INFO L290 TraceCheckUtils]: 44: Hoare triple {63478#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {63478#true} is VALID [2022-02-21 00:02:16,048 INFO L290 TraceCheckUtils]: 45: Hoare triple {63478#true} assume true; {63478#true} is VALID [2022-02-21 00:02:16,049 INFO L284 TraceCheckUtils]: 46: Hoare quadruple {63478#true} {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} #791#return; {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} is VALID [2022-02-21 00:02:16,049 INFO L290 TraceCheckUtils]: 47: Hoare triple {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} is VALID [2022-02-21 00:02:16,049 INFO L290 TraceCheckUtils]: 48: Hoare triple {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} assume 0 == ~PagingReferenceCount~0; {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} is VALID [2022-02-21 00:02:16,050 INFO L290 TraceCheckUtils]: 49: Hoare triple {63497#(= |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {63502#(= |ULTIMATE.start_FloppyPnp_#res#1| 0)} is VALID [2022-02-21 00:02:16,050 INFO L290 TraceCheckUtils]: 50: Hoare triple {63502#(= |ULTIMATE.start_FloppyPnp_#res#1| 0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,050 INFO L290 TraceCheckUtils]: 51: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(1 == ~pended~0); {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,051 INFO L290 TraceCheckUtils]: 52: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(1 == ~pended~0); {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,051 INFO L290 TraceCheckUtils]: 53: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume ~s~0 != ~UNLOADED~0; {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,052 INFO L290 TraceCheckUtils]: 54: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume -1 != main_~status~1#1; {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,052 INFO L290 TraceCheckUtils]: 55: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume ~s~0 != ~SKIP2~0; {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,052 INFO L290 TraceCheckUtils]: 56: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume ~s~0 != ~IPC~0; {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,053 INFO L290 TraceCheckUtils]: 57: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(~s~0 != ~DC~0); {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,053 INFO L290 TraceCheckUtils]: 58: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume !(1 == ~pended~0); {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,053 INFO L290 TraceCheckUtils]: 59: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume ~s~0 == ~DC~0; {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} is VALID [2022-02-21 00:02:16,054 INFO L290 TraceCheckUtils]: 60: Hoare triple {63503#(= |ULTIMATE.start_main_~status~1#1| 0)} assume 259 == main_~status~1#1; {63479#false} is VALID [2022-02-21 00:02:16,054 INFO L272 TraceCheckUtils]: 61: Hoare triple {63479#false} call errorFn(); {63479#false} is VALID [2022-02-21 00:02:16,054 INFO L290 TraceCheckUtils]: 62: Hoare triple {63479#false} assume !false; {63479#false} is VALID [2022-02-21 00:02:16,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:16,055 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:16,055 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1537120204] [2022-02-21 00:02:16,055 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1537120204] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:16,055 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:16,055 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-21 00:02:16,055 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1325216982] [2022-02-21 00:02:16,055 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:16,056 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.8) internal successors, (58), 7 states have internal predecessors, (58), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 63 [2022-02-21 00:02:16,056 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:16,056 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.8) internal successors, (58), 7 states have internal predecessors, (58), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:16,108 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:16,108 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-21 00:02:16,108 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:16,109 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-21 00:02:16,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-02-21 00:02:16,109 INFO L87 Difference]: Start difference. First operand 343 states and 425 transitions. Second operand has 10 states, 10 states have (on average 5.8) internal successors, (58), 7 states have internal predecessors, (58), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:16,985 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:16,986 INFO L93 Difference]: Finished difference Result 375 states and 461 transitions. [2022-02-21 00:02:16,986 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-21 00:02:16,986 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.8) internal successors, (58), 7 states have internal predecessors, (58), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 63 [2022-02-21 00:02:16,986 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:16,986 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.8) internal successors, (58), 7 states have internal predecessors, (58), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:16,987 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 215 transitions. [2022-02-21 00:02:16,987 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.8) internal successors, (58), 7 states have internal predecessors, (58), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:16,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 215 transitions. [2022-02-21 00:02:16,989 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 215 transitions. [2022-02-21 00:02:17,134 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 215 edges. 215 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:17,139 INFO L225 Difference]: With dead ends: 375 [2022-02-21 00:02:17,139 INFO L226 Difference]: Without dead ends: 359 [2022-02-21 00:02:17,139 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 17 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=144, Unknown=0, NotChecked=0, Total=182 [2022-02-21 00:02:17,139 INFO L933 BasicCegarLoop]: 176 mSDtfsCounter, 246 mSDsluCounter, 817 mSDsCounter, 0 mSdLazyCounter, 279 mSolverCounterSat, 54 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 248 SdHoareTripleChecker+Valid, 993 SdHoareTripleChecker+Invalid, 333 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 54 IncrementalHoareTripleChecker+Valid, 279 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:17,140 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [248 Valid, 993 Invalid, 333 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [54 Valid, 279 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:02:17,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2022-02-21 00:02:17,144 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 351. [2022-02-21 00:02:17,144 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:17,145 INFO L82 GeneralOperation]: Start isEquivalent. First operand 359 states. Second operand has 351 states, 311 states have (on average 1.247588424437299) internal successors, (388), 315 states have internal predecessors, (388), 21 states have call successors, (21), 16 states have call predecessors, (21), 18 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) [2022-02-21 00:02:17,145 INFO L74 IsIncluded]: Start isIncluded. First operand 359 states. Second operand has 351 states, 311 states have (on average 1.247588424437299) internal successors, (388), 315 states have internal predecessors, (388), 21 states have call successors, (21), 16 states have call predecessors, (21), 18 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) [2022-02-21 00:02:17,146 INFO L87 Difference]: Start difference. First operand 359 states. Second operand has 351 states, 311 states have (on average 1.247588424437299) internal successors, (388), 315 states have internal predecessors, (388), 21 states have call successors, (21), 16 states have call predecessors, (21), 18 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) [2022-02-21 00:02:17,151 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:17,151 INFO L93 Difference]: Finished difference Result 359 states and 443 transitions. [2022-02-21 00:02:17,151 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 443 transitions. [2022-02-21 00:02:17,152 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:17,152 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:17,152 INFO L74 IsIncluded]: Start isIncluded. First operand has 351 states, 311 states have (on average 1.247588424437299) internal successors, (388), 315 states have internal predecessors, (388), 21 states have call successors, (21), 16 states have call predecessors, (21), 18 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) Second operand 359 states. [2022-02-21 00:02:17,153 INFO L87 Difference]: Start difference. First operand has 351 states, 311 states have (on average 1.247588424437299) internal successors, (388), 315 states have internal predecessors, (388), 21 states have call successors, (21), 16 states have call predecessors, (21), 18 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) Second operand 359 states. [2022-02-21 00:02:17,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:17,159 INFO L93 Difference]: Finished difference Result 359 states and 443 transitions. [2022-02-21 00:02:17,159 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 443 transitions. [2022-02-21 00:02:17,160 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:17,160 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:17,160 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:17,160 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:17,161 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 351 states, 311 states have (on average 1.247588424437299) internal successors, (388), 315 states have internal predecessors, (388), 21 states have call successors, (21), 16 states have call predecessors, (21), 18 states have return successors, (25), 20 states have call predecessors, (25), 19 states have call successors, (25) [2022-02-21 00:02:17,165 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 351 states to 351 states and 434 transitions. [2022-02-21 00:02:17,165 INFO L78 Accepts]: Start accepts. Automaton has 351 states and 434 transitions. Word has length 63 [2022-02-21 00:02:17,166 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:17,166 INFO L470 AbstractCegarLoop]: Abstraction has 351 states and 434 transitions. [2022-02-21 00:02:17,166 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.8) internal successors, (58), 7 states have internal predecessors, (58), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:17,166 INFO L276 IsEmpty]: Start isEmpty. Operand 351 states and 434 transitions. [2022-02-21 00:02:17,167 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 65 [2022-02-21 00:02:17,167 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:17,167 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:17,167 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable33 [2022-02-21 00:02:17,167 INFO L402 AbstractCegarLoop]: === Iteration 35 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:17,168 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:17,168 INFO L85 PathProgramCache]: Analyzing trace with hash -164766848, now seen corresponding path program 1 times [2022-02-21 00:02:17,168 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:17,168 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [185486702] [2022-02-21 00:02:17,168 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:17,168 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:17,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:17,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 22 [2022-02-21 00:02:17,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:17,268 INFO L290 TraceCheckUtils]: 0: Hoare triple {64990#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {64963#true} is VALID [2022-02-21 00:02:17,268 INFO L290 TraceCheckUtils]: 1: Hoare triple {64963#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {64963#true} is VALID [2022-02-21 00:02:17,268 INFO L290 TraceCheckUtils]: 2: Hoare triple {64963#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {64963#true} is VALID [2022-02-21 00:02:17,269 INFO L290 TraceCheckUtils]: 3: Hoare triple {64963#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {64963#true} is VALID [2022-02-21 00:02:17,269 INFO L290 TraceCheckUtils]: 4: Hoare triple {64963#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {64963#true} is VALID [2022-02-21 00:02:17,269 INFO L290 TraceCheckUtils]: 5: Hoare triple {64963#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {64963#true} is VALID [2022-02-21 00:02:17,269 INFO L290 TraceCheckUtils]: 6: Hoare triple {64963#true} assume { :end_inline_stubMoreProcessingRequired } true; {64963#true} is VALID [2022-02-21 00:02:17,269 INFO L290 TraceCheckUtils]: 7: Hoare triple {64963#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {64963#true} is VALID [2022-02-21 00:02:17,269 INFO L290 TraceCheckUtils]: 8: Hoare triple {64963#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {64963#true} is VALID [2022-02-21 00:02:17,270 INFO L290 TraceCheckUtils]: 9: Hoare triple {64963#true} assume 1 == ~tmp_ndt_8~0#1; {64963#true} is VALID [2022-02-21 00:02:17,270 INFO L290 TraceCheckUtils]: 10: Hoare triple {64963#true} ~returnVal2~0#1 := -1073741823; {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,270 INFO L290 TraceCheckUtils]: 11: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} assume !(~s~0 == ~NP~0); {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,271 INFO L290 TraceCheckUtils]: 12: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} assume ~s~0 == ~MPR1~0; {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,271 INFO L290 TraceCheckUtils]: 13: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,271 INFO L290 TraceCheckUtils]: 14: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} #res#1 := ~returnVal2~0#1; {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} is VALID [2022-02-21 00:02:17,272 INFO L290 TraceCheckUtils]: 15: Hoare triple {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} assume true; {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} is VALID [2022-02-21 00:02:17,273 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} {64963#true} #787#return; {64982#(<= (+ |ULTIMATE.start_FloppyPnp_#t~ret43#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 43 [2022-02-21 00:02:17,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:17,282 INFO L290 TraceCheckUtils]: 0: Hoare triple {64993#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {64963#true} is VALID [2022-02-21 00:02:17,283 INFO L290 TraceCheckUtils]: 1: Hoare triple {64963#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {64963#true} is VALID [2022-02-21 00:02:17,283 INFO L290 TraceCheckUtils]: 2: Hoare triple {64963#true} assume true; {64963#true} is VALID [2022-02-21 00:02:17,283 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {64963#true} {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} #791#return; {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,284 INFO L290 TraceCheckUtils]: 0: Hoare triple {64963#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {64963#true} is VALID [2022-02-21 00:02:17,284 INFO L290 TraceCheckUtils]: 1: Hoare triple {64963#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {64963#true} is VALID [2022-02-21 00:02:17,284 INFO L290 TraceCheckUtils]: 2: Hoare triple {64963#true} assume { :end_inline__BLAST_init } true; {64963#true} is VALID [2022-02-21 00:02:17,284 INFO L290 TraceCheckUtils]: 3: Hoare triple {64963#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {64963#true} is VALID [2022-02-21 00:02:17,284 INFO L290 TraceCheckUtils]: 4: Hoare triple {64963#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {64963#true} is VALID [2022-02-21 00:02:17,284 INFO L290 TraceCheckUtils]: 5: Hoare triple {64963#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {64963#true} is VALID [2022-02-21 00:02:17,285 INFO L290 TraceCheckUtils]: 6: Hoare triple {64963#true} assume { :end_inline_stub_driver_init } true; {64963#true} is VALID [2022-02-21 00:02:17,285 INFO L290 TraceCheckUtils]: 7: Hoare triple {64963#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {64963#true} is VALID [2022-02-21 00:02:17,285 INFO L290 TraceCheckUtils]: 8: Hoare triple {64963#true} assume 3 == main_~tmp_ndt_1~0#1; {64963#true} is VALID [2022-02-21 00:02:17,285 INFO L290 TraceCheckUtils]: 9: Hoare triple {64963#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {64963#true} is VALID [2022-02-21 00:02:17,285 INFO L290 TraceCheckUtils]: 10: Hoare triple {64963#true} assume 1 == ~PagingReferenceCount~0; {64963#true} is VALID [2022-02-21 00:02:17,285 INFO L290 TraceCheckUtils]: 11: Hoare triple {64963#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {64963#true} is VALID [2022-02-21 00:02:17,286 INFO L290 TraceCheckUtils]: 12: Hoare triple {64963#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {64963#true} is VALID [2022-02-21 00:02:17,286 INFO L290 TraceCheckUtils]: 13: Hoare triple {64963#true} assume !(0 == FloppyPnp_~irpSp__MinorFunction~0#1); {64963#true} is VALID [2022-02-21 00:02:17,286 INFO L290 TraceCheckUtils]: 14: Hoare triple {64963#true} assume !(5 == FloppyPnp_~irpSp__MinorFunction~0#1); {64963#true} is VALID [2022-02-21 00:02:17,286 INFO L290 TraceCheckUtils]: 15: Hoare triple {64963#true} assume !(1 == FloppyPnp_~irpSp__MinorFunction~0#1); {64963#true} is VALID [2022-02-21 00:02:17,286 INFO L290 TraceCheckUtils]: 16: Hoare triple {64963#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {64963#true} is VALID [2022-02-21 00:02:17,286 INFO L290 TraceCheckUtils]: 17: Hoare triple {64963#true} assume 6 == FloppyPnp_~irpSp__MinorFunction~0#1; {64963#true} is VALID [2022-02-21 00:02:17,286 INFO L290 TraceCheckUtils]: 18: Hoare triple {64963#true} assume !(0 == FloppyPnp_~disketteExtension__IsStarted~0#1);FloppyPnp_~Irp__IoStatus__Status~1#1 := 0;~myStatus~0 := 0;FloppyPnp_~irpSp___0~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1;FloppyPnp_~nextIrpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~nextIrpSp__Control~0#1 := 0; {64963#true} is VALID [2022-02-21 00:02:17,287 INFO L290 TraceCheckUtils]: 19: Hoare triple {64963#true} assume !(~s~0 != ~NP~0); {64963#true} is VALID [2022-02-21 00:02:17,287 INFO L290 TraceCheckUtils]: 20: Hoare triple {64963#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {64963#true} is VALID [2022-02-21 00:02:17,287 INFO L290 TraceCheckUtils]: 21: Hoare triple {64963#true} FloppyPnp_~irpSp___1~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FloppyPnp_~irpSp__Context~0#1 := FloppyPnp_~doneEvent~0#1;FloppyPnp_~irpSp__Control~0#1 := 224; {64963#true} is VALID [2022-02-21 00:02:17,288 INFO L272 TraceCheckUtils]: 22: Hoare triple {64963#true} call FloppyPnp_#t~ret43#1 := IofCallDriver(FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~Irp#1); {64990#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:17,288 INFO L290 TraceCheckUtils]: 23: Hoare triple {64990#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {64963#true} is VALID [2022-02-21 00:02:17,288 INFO L290 TraceCheckUtils]: 24: Hoare triple {64963#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {64963#true} is VALID [2022-02-21 00:02:17,288 INFO L290 TraceCheckUtils]: 25: Hoare triple {64963#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {64963#true} is VALID [2022-02-21 00:02:17,288 INFO L290 TraceCheckUtils]: 26: Hoare triple {64963#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {64963#true} is VALID [2022-02-21 00:02:17,288 INFO L290 TraceCheckUtils]: 27: Hoare triple {64963#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {64963#true} is VALID [2022-02-21 00:02:17,289 INFO L290 TraceCheckUtils]: 28: Hoare triple {64963#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {64963#true} is VALID [2022-02-21 00:02:17,289 INFO L290 TraceCheckUtils]: 29: Hoare triple {64963#true} assume { :end_inline_stubMoreProcessingRequired } true; {64963#true} is VALID [2022-02-21 00:02:17,289 INFO L290 TraceCheckUtils]: 30: Hoare triple {64963#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {64963#true} is VALID [2022-02-21 00:02:17,289 INFO L290 TraceCheckUtils]: 31: Hoare triple {64963#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {64963#true} is VALID [2022-02-21 00:02:17,289 INFO L290 TraceCheckUtils]: 32: Hoare triple {64963#true} assume 1 == ~tmp_ndt_8~0#1; {64963#true} is VALID [2022-02-21 00:02:17,290 INFO L290 TraceCheckUtils]: 33: Hoare triple {64963#true} ~returnVal2~0#1 := -1073741823; {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,290 INFO L290 TraceCheckUtils]: 34: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} assume !(~s~0 == ~NP~0); {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,290 INFO L290 TraceCheckUtils]: 35: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} assume ~s~0 == ~MPR1~0; {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,291 INFO L290 TraceCheckUtils]: 36: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} is VALID [2022-02-21 00:02:17,291 INFO L290 TraceCheckUtils]: 37: Hoare triple {64991#(<= (+ 1073741823 |IofCallDriver_~returnVal2~0#1|) 0)} #res#1 := ~returnVal2~0#1; {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} is VALID [2022-02-21 00:02:17,291 INFO L290 TraceCheckUtils]: 38: Hoare triple {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} assume true; {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} is VALID [2022-02-21 00:02:17,292 INFO L284 TraceCheckUtils]: 39: Hoare quadruple {64992#(<= (+ 1073741823 |IofCallDriver_#res#1|) 0)} {64963#true} #787#return; {64982#(<= (+ |ULTIMATE.start_FloppyPnp_#t~ret43#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,293 INFO L290 TraceCheckUtils]: 40: Hoare triple {64982#(<= (+ |ULTIMATE.start_FloppyPnp_#t~ret43#1| 1073741823) 0)} assume -2147483648 <= FloppyPnp_#t~ret43#1 && FloppyPnp_#t~ret43#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret43#1;havoc FloppyPnp_#t~ret43#1;FloppyPnp_~__cil_tmp30~0#1 := FloppyPnp_~ntStatus~0#1; {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,293 INFO L290 TraceCheckUtils]: 41: Hoare triple {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} assume !(259 == FloppyPnp_~__cil_tmp30~0#1); {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,293 INFO L290 TraceCheckUtils]: 42: Hoare triple {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} FloppyPnp_~disketteExtension__HoldNewRequests~0#1 := 0;FloppyPnp_~Irp__IoStatus__Status~1#1 := FloppyPnp_~ntStatus~0#1;~myStatus~0 := FloppyPnp_~ntStatus~0#1;FloppyPnp_~Irp__IoStatus__Information~1#1 := 0; {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,294 INFO L272 TraceCheckUtils]: 43: Hoare triple {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} call IofCompleteRequest(FloppyPnp_~Irp#1, 0); {64993#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:02:17,294 INFO L290 TraceCheckUtils]: 44: Hoare triple {64993#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {64963#true} is VALID [2022-02-21 00:02:17,294 INFO L290 TraceCheckUtils]: 45: Hoare triple {64963#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {64963#true} is VALID [2022-02-21 00:02:17,295 INFO L290 TraceCheckUtils]: 46: Hoare triple {64963#true} assume true; {64963#true} is VALID [2022-02-21 00:02:17,295 INFO L284 TraceCheckUtils]: 47: Hoare quadruple {64963#true} {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} #791#return; {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,295 INFO L290 TraceCheckUtils]: 48: Hoare triple {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,296 INFO L290 TraceCheckUtils]: 49: Hoare triple {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} assume 0 == ~PagingReferenceCount~0; {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,296 INFO L290 TraceCheckUtils]: 50: Hoare triple {64983#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1073741823) 0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {64988#(<= (+ 1073741823 |ULTIMATE.start_FloppyPnp_#res#1|) 0)} is VALID [2022-02-21 00:02:17,297 INFO L290 TraceCheckUtils]: 51: Hoare triple {64988#(<= (+ 1073741823 |ULTIMATE.start_FloppyPnp_#res#1|) 0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,297 INFO L290 TraceCheckUtils]: 52: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(1 == ~pended~0); {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,297 INFO L290 TraceCheckUtils]: 53: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(1 == ~pended~0); {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,298 INFO L290 TraceCheckUtils]: 54: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 != ~UNLOADED~0; {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,298 INFO L290 TraceCheckUtils]: 55: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume -1 != main_~status~1#1; {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,298 INFO L290 TraceCheckUtils]: 56: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 != ~SKIP2~0; {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,299 INFO L290 TraceCheckUtils]: 57: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 != ~IPC~0; {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,299 INFO L290 TraceCheckUtils]: 58: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(~s~0 != ~DC~0); {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,299 INFO L290 TraceCheckUtils]: 59: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume !(1 == ~pended~0); {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,300 INFO L290 TraceCheckUtils]: 60: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume ~s~0 == ~DC~0; {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} is VALID [2022-02-21 00:02:17,300 INFO L290 TraceCheckUtils]: 61: Hoare triple {64989#(<= (+ |ULTIMATE.start_main_~status~1#1| 1073741823) 0)} assume 259 == main_~status~1#1; {64964#false} is VALID [2022-02-21 00:02:17,300 INFO L272 TraceCheckUtils]: 62: Hoare triple {64964#false} call errorFn(); {64964#false} is VALID [2022-02-21 00:02:17,300 INFO L290 TraceCheckUtils]: 63: Hoare triple {64964#false} assume !false; {64964#false} is VALID [2022-02-21 00:02:17,301 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:17,301 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:17,301 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [185486702] [2022-02-21 00:02:17,301 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [185486702] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:17,301 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:17,302 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2022-02-21 00:02:17,302 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [660926979] [2022-02-21 00:02:17,302 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:17,302 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 7 states have internal predecessors, (59), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 64 [2022-02-21 00:02:17,303 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:17,303 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 10 states, 10 states have (on average 5.9) internal successors, (59), 7 states have internal predecessors, (59), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:17,345 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 64 edges. 64 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:17,345 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 10 states [2022-02-21 00:02:17,345 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:17,346 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2022-02-21 00:02:17,346 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=72, Unknown=0, NotChecked=0, Total=90 [2022-02-21 00:02:17,346 INFO L87 Difference]: Start difference. First operand 351 states and 434 transitions. Second operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 7 states have internal predecessors, (59), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:18,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:18,348 INFO L93 Difference]: Finished difference Result 375 states and 460 transitions. [2022-02-21 00:02:18,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2022-02-21 00:02:18,348 INFO L78 Accepts]: Start accepts. Automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 7 states have internal predecessors, (59), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 64 [2022-02-21 00:02:18,348 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:18,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 7 states have internal predecessors, (59), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:18,350 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 214 transitions. [2022-02-21 00:02:18,350 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10 states, 10 states have (on average 5.9) internal successors, (59), 7 states have internal predecessors, (59), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:18,352 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10 states to 10 states and 214 transitions. [2022-02-21 00:02:18,352 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 10 states and 214 transitions. [2022-02-21 00:02:18,516 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 214 edges. 214 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:18,523 INFO L225 Difference]: With dead ends: 375 [2022-02-21 00:02:18,523 INFO L226 Difference]: Without dead ends: 359 [2022-02-21 00:02:18,524 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=32, Invalid=124, Unknown=0, NotChecked=0, Total=156 [2022-02-21 00:02:18,524 INFO L933 BasicCegarLoop]: 189 mSDtfsCounter, 71 mSDsluCounter, 1073 mSDsCounter, 0 mSdLazyCounter, 286 mSolverCounterSat, 22 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 72 SdHoareTripleChecker+Valid, 1262 SdHoareTripleChecker+Invalid, 308 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 22 IncrementalHoareTripleChecker+Valid, 286 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:18,524 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [72 Valid, 1262 Invalid, 308 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [22 Valid, 286 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:02:18,525 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 359 states. [2022-02-21 00:02:18,529 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 359 to 343. [2022-02-21 00:02:18,529 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:18,530 INFO L82 GeneralOperation]: Start isEquivalent. First operand 359 states. Second operand has 343 states, 304 states have (on average 1.25) internal successors, (380), 308 states have internal predecessors, (380), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:18,530 INFO L74 IsIncluded]: Start isIncluded. First operand 359 states. Second operand has 343 states, 304 states have (on average 1.25) internal successors, (380), 308 states have internal predecessors, (380), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:18,530 INFO L87 Difference]: Start difference. First operand 359 states. Second operand has 343 states, 304 states have (on average 1.25) internal successors, (380), 308 states have internal predecessors, (380), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:18,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:18,537 INFO L93 Difference]: Finished difference Result 359 states and 442 transitions. [2022-02-21 00:02:18,538 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 442 transitions. [2022-02-21 00:02:18,538 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:18,538 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:18,539 INFO L74 IsIncluded]: Start isIncluded. First operand has 343 states, 304 states have (on average 1.25) internal successors, (380), 308 states have internal predecessors, (380), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) Second operand 359 states. [2022-02-21 00:02:18,539 INFO L87 Difference]: Start difference. First operand has 343 states, 304 states have (on average 1.25) internal successors, (380), 308 states have internal predecessors, (380), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) Second operand 359 states. [2022-02-21 00:02:18,546 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:18,546 INFO L93 Difference]: Finished difference Result 359 states and 442 transitions. [2022-02-21 00:02:18,547 INFO L276 IsEmpty]: Start isEmpty. Operand 359 states and 442 transitions. [2022-02-21 00:02:18,547 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:18,547 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:18,547 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:18,547 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:18,548 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 304 states have (on average 1.25) internal successors, (380), 308 states have internal predecessors, (380), 21 states have call successors, (21), 16 states have call predecessors, (21), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:18,554 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 424 transitions. [2022-02-21 00:02:18,556 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 424 transitions. Word has length 64 [2022-02-21 00:02:18,556 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:18,556 INFO L470 AbstractCegarLoop]: Abstraction has 343 states and 424 transitions. [2022-02-21 00:02:18,556 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 10 states, 10 states have (on average 5.9) internal successors, (59), 7 states have internal predecessors, (59), 3 states have call successors, (3), 3 states have call predecessors, (3), 2 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:18,557 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 424 transitions. [2022-02-21 00:02:18,557 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 69 [2022-02-21 00:02:18,558 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:18,558 INFO L514 BasicCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:18,558 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable34 [2022-02-21 00:02:18,558 INFO L402 AbstractCegarLoop]: === Iteration 36 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:18,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:18,559 INFO L85 PathProgramCache]: Analyzing trace with hash 955115294, now seen corresponding path program 1 times [2022-02-21 00:02:18,559 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:18,559 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1154495891] [2022-02-21 00:02:18,559 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:18,559 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:18,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:18,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-21 00:02:18,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:18,668 INFO L290 TraceCheckUtils]: 0: Hoare triple {66465#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {66438#true} is VALID [2022-02-21 00:02:18,668 INFO L290 TraceCheckUtils]: 1: Hoare triple {66438#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {66438#true} is VALID [2022-02-21 00:02:18,669 INFO L290 TraceCheckUtils]: 2: Hoare triple {66438#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {66438#true} is VALID [2022-02-21 00:02:18,669 INFO L290 TraceCheckUtils]: 3: Hoare triple {66438#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {66438#true} is VALID [2022-02-21 00:02:18,669 INFO L290 TraceCheckUtils]: 4: Hoare triple {66438#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {66438#true} is VALID [2022-02-21 00:02:18,669 INFO L290 TraceCheckUtils]: 5: Hoare triple {66438#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {66438#true} is VALID [2022-02-21 00:02:18,669 INFO L290 TraceCheckUtils]: 6: Hoare triple {66438#true} assume { :end_inline_stubMoreProcessingRequired } true; {66438#true} is VALID [2022-02-21 00:02:18,669 INFO L290 TraceCheckUtils]: 7: Hoare triple {66438#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {66438#true} is VALID [2022-02-21 00:02:18,669 INFO L290 TraceCheckUtils]: 8: Hoare triple {66438#true} assume 0 == ~tmp_ndt_7~0#1; {66438#true} is VALID [2022-02-21 00:02:18,670 INFO L290 TraceCheckUtils]: 9: Hoare triple {66438#true} ~returnVal2~0#1 := 0; {66438#true} is VALID [2022-02-21 00:02:18,670 INFO L290 TraceCheckUtils]: 10: Hoare triple {66438#true} assume !(~s~0 == ~NP~0); {66438#true} is VALID [2022-02-21 00:02:18,670 INFO L290 TraceCheckUtils]: 11: Hoare triple {66438#true} assume ~s~0 == ~MPR1~0; {66438#true} is VALID [2022-02-21 00:02:18,670 INFO L290 TraceCheckUtils]: 12: Hoare triple {66438#true} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {66438#true} is VALID [2022-02-21 00:02:18,670 INFO L290 TraceCheckUtils]: 13: Hoare triple {66438#true} #res#1 := ~returnVal2~0#1; {66438#true} is VALID [2022-02-21 00:02:18,670 INFO L290 TraceCheckUtils]: 14: Hoare triple {66438#true} assume true; {66438#true} is VALID [2022-02-21 00:02:18,671 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {66438#true} {66438#true} #753#return; {66438#true} is VALID [2022-02-21 00:02:18,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 45 [2022-02-21 00:02:18,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:18,680 INFO L290 TraceCheckUtils]: 0: Hoare triple {66466#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {66438#true} is VALID [2022-02-21 00:02:18,680 INFO L290 TraceCheckUtils]: 1: Hoare triple {66438#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {66438#true} is VALID [2022-02-21 00:02:18,680 INFO L290 TraceCheckUtils]: 2: Hoare triple {66438#true} assume true; {66438#true} is VALID [2022-02-21 00:02:18,681 INFO L284 TraceCheckUtils]: 3: Hoare quadruple {66438#true} {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} #763#return; {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,681 INFO L290 TraceCheckUtils]: 0: Hoare triple {66438#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {66438#true} is VALID [2022-02-21 00:02:18,681 INFO L290 TraceCheckUtils]: 1: Hoare triple {66438#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {66438#true} is VALID [2022-02-21 00:02:18,681 INFO L290 TraceCheckUtils]: 2: Hoare triple {66438#true} assume { :end_inline__BLAST_init } true; {66438#true} is VALID [2022-02-21 00:02:18,681 INFO L290 TraceCheckUtils]: 3: Hoare triple {66438#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {66438#true} is VALID [2022-02-21 00:02:18,682 INFO L290 TraceCheckUtils]: 4: Hoare triple {66438#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {66438#true} is VALID [2022-02-21 00:02:18,682 INFO L290 TraceCheckUtils]: 5: Hoare triple {66438#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {66438#true} is VALID [2022-02-21 00:02:18,682 INFO L290 TraceCheckUtils]: 6: Hoare triple {66438#true} assume { :end_inline_stub_driver_init } true; {66438#true} is VALID [2022-02-21 00:02:18,682 INFO L290 TraceCheckUtils]: 7: Hoare triple {66438#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {66438#true} is VALID [2022-02-21 00:02:18,682 INFO L290 TraceCheckUtils]: 8: Hoare triple {66438#true} assume 3 == main_~tmp_ndt_1~0#1; {66438#true} is VALID [2022-02-21 00:02:18,682 INFO L290 TraceCheckUtils]: 9: Hoare triple {66438#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {66438#true} is VALID [2022-02-21 00:02:18,683 INFO L290 TraceCheckUtils]: 10: Hoare triple {66438#true} assume 1 == ~PagingReferenceCount~0; {66438#true} is VALID [2022-02-21 00:02:18,683 INFO L290 TraceCheckUtils]: 11: Hoare triple {66438#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {66438#true} is VALID [2022-02-21 00:02:18,683 INFO L290 TraceCheckUtils]: 12: Hoare triple {66438#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {66438#true} is VALID [2022-02-21 00:02:18,683 INFO L290 TraceCheckUtils]: 13: Hoare triple {66438#true} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {66438#true} is VALID [2022-02-21 00:02:18,683 INFO L290 TraceCheckUtils]: 14: Hoare triple {66438#true} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {66438#true} is VALID [2022-02-21 00:02:18,684 INFO L290 TraceCheckUtils]: 15: Hoare triple {66438#true} assume !(~s~0 != ~NP~0); {66438#true} is VALID [2022-02-21 00:02:18,684 INFO L290 TraceCheckUtils]: 16: Hoare triple {66438#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {66438#true} is VALID [2022-02-21 00:02:18,684 INFO L290 TraceCheckUtils]: 17: Hoare triple {66438#true} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {66438#true} is VALID [2022-02-21 00:02:18,685 INFO L272 TraceCheckUtils]: 18: Hoare triple {66438#true} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {66465#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:18,685 INFO L290 TraceCheckUtils]: 19: Hoare triple {66465#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {66438#true} is VALID [2022-02-21 00:02:18,685 INFO L290 TraceCheckUtils]: 20: Hoare triple {66438#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {66438#true} is VALID [2022-02-21 00:02:18,685 INFO L290 TraceCheckUtils]: 21: Hoare triple {66438#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {66438#true} is VALID [2022-02-21 00:02:18,685 INFO L290 TraceCheckUtils]: 22: Hoare triple {66438#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {66438#true} is VALID [2022-02-21 00:02:18,686 INFO L290 TraceCheckUtils]: 23: Hoare triple {66438#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {66438#true} is VALID [2022-02-21 00:02:18,686 INFO L290 TraceCheckUtils]: 24: Hoare triple {66438#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {66438#true} is VALID [2022-02-21 00:02:18,686 INFO L290 TraceCheckUtils]: 25: Hoare triple {66438#true} assume { :end_inline_stubMoreProcessingRequired } true; {66438#true} is VALID [2022-02-21 00:02:18,686 INFO L290 TraceCheckUtils]: 26: Hoare triple {66438#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {66438#true} is VALID [2022-02-21 00:02:18,686 INFO L290 TraceCheckUtils]: 27: Hoare triple {66438#true} assume 0 == ~tmp_ndt_7~0#1; {66438#true} is VALID [2022-02-21 00:02:18,686 INFO L290 TraceCheckUtils]: 28: Hoare triple {66438#true} ~returnVal2~0#1 := 0; {66438#true} is VALID [2022-02-21 00:02:18,686 INFO L290 TraceCheckUtils]: 29: Hoare triple {66438#true} assume !(~s~0 == ~NP~0); {66438#true} is VALID [2022-02-21 00:02:18,687 INFO L290 TraceCheckUtils]: 30: Hoare triple {66438#true} assume ~s~0 == ~MPR1~0; {66438#true} is VALID [2022-02-21 00:02:18,687 INFO L290 TraceCheckUtils]: 31: Hoare triple {66438#true} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {66438#true} is VALID [2022-02-21 00:02:18,687 INFO L290 TraceCheckUtils]: 32: Hoare triple {66438#true} #res#1 := ~returnVal2~0#1; {66438#true} is VALID [2022-02-21 00:02:18,687 INFO L290 TraceCheckUtils]: 33: Hoare triple {66438#true} assume true; {66438#true} is VALID [2022-02-21 00:02:18,687 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {66438#true} {66438#true} #753#return; {66438#true} is VALID [2022-02-21 00:02:18,687 INFO L290 TraceCheckUtils]: 35: Hoare triple {66438#true} assume -2147483648 <= FloppyStartDevice_#t~ret74#1 && FloppyStartDevice_#t~ret74#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret74#1;havoc FloppyStartDevice_#t~ret74#1;FloppyStartDevice_~__cil_tmp42~0#1 := FloppyStartDevice_~ntStatus~1#1; {66438#true} is VALID [2022-02-21 00:02:18,687 INFO L290 TraceCheckUtils]: 36: Hoare triple {66438#true} assume !(259 == FloppyStartDevice_~__cil_tmp42~0#1); {66438#true} is VALID [2022-02-21 00:02:18,688 INFO L290 TraceCheckUtils]: 37: Hoare triple {66438#true} FloppyStartDevice_~fdcInfo__BufferCount~0#1 := 0;FloppyStartDevice_~fdcInfo__BufferSize~0#1 := 0;FloppyStartDevice_~__cil_tmp43~0#1 := 3080;FloppyStartDevice_~__cil_tmp44~0#1 := 458752;FloppyStartDevice_~__cil_tmp45~0#1 := 461832;FloppyStartDevice_~__cil_tmp46~0#1 := 461835;assume { :begin_inline_FlFdcDeviceIo } true;FlFdcDeviceIo_#in~DeviceObject#1, FlFdcDeviceIo_#in~Ioctl#1, FlFdcDeviceIo_#in~Data#1 := FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~fdcInfo~0#1;havoc FlFdcDeviceIo_#res#1;havoc FlFdcDeviceIo_#t~nondet83#1, FlFdcDeviceIo_#t~nondet84#1, FlFdcDeviceIo_#t~nondet85#1, FlFdcDeviceIo_#t~ret86#1, FlFdcDeviceIo_#t~ret87#1, FlFdcDeviceIo_#t~ret88#1, FlFdcDeviceIo_~DeviceObject#1, FlFdcDeviceIo_~Ioctl#1, FlFdcDeviceIo_~Data#1, FlFdcDeviceIo_~ntStatus~2#1, FlFdcDeviceIo_~irp~0#1, FlFdcDeviceIo_~irpStack~0#1, FlFdcDeviceIo_~doneEvent~2#1, FlFdcDeviceIo_~ioStatus~0#1, FlFdcDeviceIo_~irp__Tail__Overlay__CurrentStackLocation~0#1, FlFdcDeviceIo_~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0#1, FlFdcDeviceIo_~__cil_tmp11~0#1;FlFdcDeviceIo_~DeviceObject#1 := FlFdcDeviceIo_#in~DeviceObject#1;FlFdcDeviceIo_~Ioctl#1 := FlFdcDeviceIo_#in~Ioctl#1;FlFdcDeviceIo_~Data#1 := FlFdcDeviceIo_#in~Data#1;havoc FlFdcDeviceIo_~ntStatus~2#1;havoc FlFdcDeviceIo_~irp~0#1;havoc FlFdcDeviceIo_~irpStack~0#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet83#1 && FlFdcDeviceIo_#t~nondet83#1 <= 2147483647;FlFdcDeviceIo_~doneEvent~2#1 := FlFdcDeviceIo_#t~nondet83#1;havoc FlFdcDeviceIo_#t~nondet83#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet84#1 && FlFdcDeviceIo_#t~nondet84#1 <= 2147483647;FlFdcDeviceIo_~ioStatus~0#1 := FlFdcDeviceIo_#t~nondet84#1;havoc FlFdcDeviceIo_#t~nondet84#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet85#1 && FlFdcDeviceIo_#t~nondet85#1 <= 2147483647;FlFdcDeviceIo_~irp__Tail__Overlay__CurrentStackLocation~0#1 := FlFdcDeviceIo_#t~nondet85#1;havoc FlFdcDeviceIo_#t~nondet85#1;havoc FlFdcDeviceIo_~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0#1;havoc FlFdcDeviceIo_~__cil_tmp11~0#1;assume { :begin_inline_IoBuildDeviceIoControlRequest } true;IoBuildDeviceIoControlRequest_#in~IoControlCode#1, IoBuildDeviceIoControlRequest_#in~DeviceObject#1, IoBuildDeviceIoControlRequest_#in~InputBuffer#1, IoBuildDeviceIoControlRequest_#in~InputBufferLength#1, IoBuildDeviceIoControlRequest_#in~OutputBuffer#1, IoBuildDeviceIoControlRequest_#in~OutputBufferLength#1, IoBuildDeviceIoControlRequest_#in~InternalDeviceIoControl#1, IoBuildDeviceIoControlRequest_#in~Event#1, IoBuildDeviceIoControlRequest_#in~IoStatusBlock#1 := FlFdcDeviceIo_~Ioctl#1, FlFdcDeviceIo_~DeviceObject#1, 0, 0, 0, 0, 1, FlFdcDeviceIo_~doneEvent~2#1, FlFdcDeviceIo_~ioStatus~0#1;havoc IoBuildDeviceIoControlRequest_#res#1;havoc IoBuildDeviceIoControlRequest_#t~nondet94#1, IoBuildDeviceIoControlRequest_#t~nondet95#1, IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1, IoBuildDeviceIoControlRequest_~IoControlCode#1, IoBuildDeviceIoControlRequest_~DeviceObject#1, IoBuildDeviceIoControlRequest_~InputBuffer#1, IoBuildDeviceIoControlRequest_~InputBufferLength#1, IoBuildDeviceIoControlRequest_~OutputBuffer#1, IoBuildDeviceIoControlRequest_~OutputBufferLength#1, IoBuildDeviceIoControlRequest_~InternalDeviceIoControl#1, IoBuildDeviceIoControlRequest_~Event#1, IoBuildDeviceIoControlRequest_~IoStatusBlock#1, IoBuildDeviceIoControlRequest_~malloc~0#1;IoBuildDeviceIoControlRequest_~IoControlCode#1 := IoBuildDeviceIoControlRequest_#in~IoControlCode#1;IoBuildDeviceIoControlRequest_~DeviceObject#1 := IoBuildDeviceIoControlRequest_#in~DeviceObject#1;IoBuildDeviceIoControlRequest_~InputBuffer#1 := IoBuildDeviceIoControlRequest_#in~InputBuffer#1;IoBuildDeviceIoControlRequest_~InputBufferLength#1 := IoBuildDeviceIoControlRequest_#in~InputBufferLength#1;IoBuildDeviceIoControlRequest_~OutputBuffer#1 := IoBuildDeviceIoControlRequest_#in~OutputBuffer#1;IoBuildDeviceIoControlRequest_~OutputBufferLength#1 := IoBuildDeviceIoControlRequest_#in~OutputBufferLength#1;IoBuildDeviceIoControlRequest_~InternalDeviceIoControl#1 := IoBuildDeviceIoControlRequest_#in~InternalDeviceIoControl#1;IoBuildDeviceIoControlRequest_~Event#1 := IoBuildDeviceIoControlRequest_#in~Event#1;IoBuildDeviceIoControlRequest_~IoStatusBlock#1 := IoBuildDeviceIoControlRequest_#in~IoStatusBlock#1;assume -2147483648 <= IoBuildDeviceIoControlRequest_#t~nondet94#1 && IoBuildDeviceIoControlRequest_#t~nondet94#1 <= 2147483647;IoBuildDeviceIoControlRequest_~malloc~0#1 := IoBuildDeviceIoControlRequest_#t~nondet94#1;havoc IoBuildDeviceIoControlRequest_#t~nondet94#1;~customIrp~0 := 1;havoc IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1;assume -2147483648 <= IoBuildDeviceIoControlRequest_#t~nondet95#1 && IoBuildDeviceIoControlRequest_#t~nondet95#1 <= 2147483647;IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1 := IoBuildDeviceIoControlRequest_#t~nondet95#1;havoc IoBuildDeviceIoControlRequest_#t~nondet95#1; {66438#true} is VALID [2022-02-21 00:02:18,688 INFO L290 TraceCheckUtils]: 38: Hoare triple {66438#true} assume 0 == IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1; {66438#true} is VALID [2022-02-21 00:02:18,688 INFO L290 TraceCheckUtils]: 39: Hoare triple {66438#true} IoBuildDeviceIoControlRequest_#res#1 := IoBuildDeviceIoControlRequest_~malloc~0#1; {66438#true} is VALID [2022-02-21 00:02:18,688 INFO L290 TraceCheckUtils]: 40: Hoare triple {66438#true} FlFdcDeviceIo_#t~ret86#1 := IoBuildDeviceIoControlRequest_#res#1;assume { :end_inline_IoBuildDeviceIoControlRequest } true;assume -2147483648 <= FlFdcDeviceIo_#t~ret86#1 && FlFdcDeviceIo_#t~ret86#1 <= 2147483647;FlFdcDeviceIo_~irp~0#1 := FlFdcDeviceIo_#t~ret86#1;havoc FlFdcDeviceIo_#t~ret86#1; {66438#true} is VALID [2022-02-21 00:02:18,688 INFO L290 TraceCheckUtils]: 41: Hoare triple {66438#true} assume 0 == FlFdcDeviceIo_~irp~0#1;FlFdcDeviceIo_#res#1 := -1073741670; {66438#true} is VALID [2022-02-21 00:02:18,688 INFO L290 TraceCheckUtils]: 42: Hoare triple {66438#true} FloppyStartDevice_#t~ret76#1 := FlFdcDeviceIo_#res#1;assume { :end_inline_FlFdcDeviceIo } true;assume -2147483648 <= FloppyStartDevice_#t~ret76#1 && FloppyStartDevice_#t~ret76#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret76#1;havoc FloppyStartDevice_#t~ret76#1; {66438#true} is VALID [2022-02-21 00:02:18,689 INFO L290 TraceCheckUtils]: 43: Hoare triple {66438#true} assume !(FloppyStartDevice_~ntStatus~1#1 >= 0); {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,689 INFO L290 TraceCheckUtils]: 44: Hoare triple {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} FloppyStartDevice_~Irp__IoStatus__Status~2#1 := FloppyStartDevice_~ntStatus~1#1;~myStatus~0 := FloppyStartDevice_~ntStatus~1#1; {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,690 INFO L272 TraceCheckUtils]: 45: Hoare triple {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} call IofCompleteRequest(FloppyStartDevice_~Irp#1, 0); {66466#(= ~s~0 |old(~s~0)|)} is VALID [2022-02-21 00:02:18,690 INFO L290 TraceCheckUtils]: 46: Hoare triple {66466#(= ~s~0 |old(~s~0)|)} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {66438#true} is VALID [2022-02-21 00:02:18,690 INFO L290 TraceCheckUtils]: 47: Hoare triple {66438#true} assume ~s~0 == ~NP~0;~s~0 := ~DC~0; {66438#true} is VALID [2022-02-21 00:02:18,690 INFO L290 TraceCheckUtils]: 48: Hoare triple {66438#true} assume true; {66438#true} is VALID [2022-02-21 00:02:18,691 INFO L284 TraceCheckUtils]: 49: Hoare quadruple {66438#true} {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} #763#return; {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,691 INFO L290 TraceCheckUtils]: 50: Hoare triple {66456#(<= (+ |ULTIMATE.start_FloppyStartDevice_~ntStatus~1#1| 1) 0)} FloppyStartDevice_#res#1 := FloppyStartDevice_~ntStatus~1#1; {66461#(<= (+ |ULTIMATE.start_FloppyStartDevice_#res#1| 1) 0)} is VALID [2022-02-21 00:02:18,692 INFO L290 TraceCheckUtils]: 51: Hoare triple {66461#(<= (+ |ULTIMATE.start_FloppyStartDevice_#res#1| 1) 0)} FloppyPnp_#t~ret31#1 := FloppyStartDevice_#res#1;assume { :end_inline_FloppyStartDevice } true;assume -2147483648 <= FloppyPnp_#t~ret31#1 && FloppyPnp_#t~ret31#1 <= 2147483647;FloppyPnp_~ntStatus~0#1 := FloppyPnp_#t~ret31#1;havoc FloppyPnp_#t~ret31#1; {66462#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1) 0)} is VALID [2022-02-21 00:02:18,692 INFO L290 TraceCheckUtils]: 52: Hoare triple {66462#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1) 0)} FloppyPnp_#t~post57#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := FloppyPnp_#t~post57#1 - 1;havoc FloppyPnp_#t~post57#1; {66462#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1) 0)} is VALID [2022-02-21 00:02:18,692 INFO L290 TraceCheckUtils]: 53: Hoare triple {66462#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1) 0)} assume 0 == ~PagingReferenceCount~0; {66462#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1) 0)} is VALID [2022-02-21 00:02:18,693 INFO L290 TraceCheckUtils]: 54: Hoare triple {66462#(<= (+ |ULTIMATE.start_FloppyPnp_~ntStatus~0#1| 1) 0)} FloppyPnp_#res#1 := FloppyPnp_~ntStatus~0#1; {66463#(<= (+ |ULTIMATE.start_FloppyPnp_#res#1| 1) 0)} is VALID [2022-02-21 00:02:18,693 INFO L290 TraceCheckUtils]: 55: Hoare triple {66463#(<= (+ |ULTIMATE.start_FloppyPnp_#res#1| 1) 0)} main_#t~ret93#1 := FloppyPnp_#res#1;assume { :end_inline_FloppyPnp } true;assume -2147483648 <= main_#t~ret93#1 && main_#t~ret93#1 <= 2147483647;main_~status~1#1 := main_#t~ret93#1;havoc main_#t~ret93#1; {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,694 INFO L290 TraceCheckUtils]: 56: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume !(1 == ~pended~0); {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,694 INFO L290 TraceCheckUtils]: 57: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume !(1 == ~pended~0); {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,694 INFO L290 TraceCheckUtils]: 58: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume ~s~0 != ~UNLOADED~0; {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,695 INFO L290 TraceCheckUtils]: 59: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume -1 != main_~status~1#1; {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,695 INFO L290 TraceCheckUtils]: 60: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume ~s~0 != ~SKIP2~0; {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,695 INFO L290 TraceCheckUtils]: 61: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume ~s~0 != ~IPC~0; {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,696 INFO L290 TraceCheckUtils]: 62: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume !(~s~0 != ~DC~0); {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,696 INFO L290 TraceCheckUtils]: 63: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume !(1 == ~pended~0); {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,696 INFO L290 TraceCheckUtils]: 64: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume ~s~0 == ~DC~0; {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} is VALID [2022-02-21 00:02:18,697 INFO L290 TraceCheckUtils]: 65: Hoare triple {66464#(<= (+ |ULTIMATE.start_main_~status~1#1| 1) 0)} assume 259 == main_~status~1#1; {66439#false} is VALID [2022-02-21 00:02:18,697 INFO L272 TraceCheckUtils]: 66: Hoare triple {66439#false} call errorFn(); {66439#false} is VALID [2022-02-21 00:02:18,697 INFO L290 TraceCheckUtils]: 67: Hoare triple {66439#false} assume !false; {66439#false} is VALID [2022-02-21 00:02:18,697 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-02-21 00:02:18,698 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:18,698 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1154495891] [2022-02-21 00:02:18,698 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1154495891] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:18,698 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:18,698 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2022-02-21 00:02:18,699 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1717682920] [2022-02-21 00:02:18,699 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:18,699 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 7.0) internal successors, (63), 7 states have internal predecessors, (63), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 68 [2022-02-21 00:02:18,700 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:18,700 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 9 states, 9 states have (on average 7.0) internal successors, (63), 7 states have internal predecessors, (63), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:18,748 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 68 edges. 68 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:18,748 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2022-02-21 00:02:18,748 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:18,749 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2022-02-21 00:02:18,749 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2022-02-21 00:02:18,749 INFO L87 Difference]: Start difference. First operand 343 states and 424 transitions. Second operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 7 states have internal predecessors, (63), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:19,570 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:19,570 INFO L93 Difference]: Finished difference Result 395 states and 488 transitions. [2022-02-21 00:02:19,570 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2022-02-21 00:02:19,570 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 7.0) internal successors, (63), 7 states have internal predecessors, (63), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) Word has length 68 [2022-02-21 00:02:19,570 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:19,570 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 7 states have internal predecessors, (63), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:19,571 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 212 transitions. [2022-02-21 00:02:19,571 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 9 states, 9 states have (on average 7.0) internal successors, (63), 7 states have internal predecessors, (63), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:19,572 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 212 transitions. [2022-02-21 00:02:19,572 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 9 states and 212 transitions. [2022-02-21 00:02:19,704 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 212 edges. 212 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:19,709 INFO L225 Difference]: With dead ends: 395 [2022-02-21 00:02:19,709 INFO L226 Difference]: Without dead ends: 370 [2022-02-21 00:02:19,709 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 15 GetRequests, 4 SyntacticMatches, 0 SemanticMatches, 11 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=112, Unknown=0, NotChecked=0, Total=156 [2022-02-21 00:02:19,710 INFO L933 BasicCegarLoop]: 170 mSDtfsCounter, 85 mSDsluCounter, 963 mSDsCounter, 0 mSdLazyCounter, 271 mSolverCounterSat, 15 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 85 SdHoareTripleChecker+Valid, 1133 SdHoareTripleChecker+Invalid, 286 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 15 IncrementalHoareTripleChecker+Valid, 271 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-02-21 00:02:19,710 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [85 Valid, 1133 Invalid, 286 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [15 Valid, 271 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-02-21 00:02:19,711 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370 states. [2022-02-21 00:02:19,713 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370 to 354. [2022-02-21 00:02:19,714 INFO L214 AbstractMinimizeNwa]: Start testing correctness of minimizeSevpa [2022-02-21 00:02:19,714 INFO L82 GeneralOperation]: Start isEquivalent. First operand 370 states. Second operand has 354 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 319 states have internal predecessors, (385), 22 states have call successors, (22), 16 states have call predecessors, (22), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:19,715 INFO L74 IsIncluded]: Start isIncluded. First operand 370 states. Second operand has 354 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 319 states have internal predecessors, (385), 22 states have call successors, (22), 16 states have call predecessors, (22), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:19,715 INFO L87 Difference]: Start difference. First operand 370 states. Second operand has 354 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 319 states have internal predecessors, (385), 22 states have call successors, (22), 16 states have call predecessors, (22), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:19,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:19,722 INFO L93 Difference]: Finished difference Result 370 states and 450 transitions. [2022-02-21 00:02:19,722 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 450 transitions. [2022-02-21 00:02:19,723 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:19,723 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:19,723 INFO L74 IsIncluded]: Start isIncluded. First operand has 354 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 319 states have internal predecessors, (385), 22 states have call successors, (22), 16 states have call predecessors, (22), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) Second operand 370 states. [2022-02-21 00:02:19,724 INFO L87 Difference]: Start difference. First operand has 354 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 319 states have internal predecessors, (385), 22 states have call successors, (22), 16 states have call predecessors, (22), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) Second operand 370 states. [2022-02-21 00:02:19,731 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:19,731 INFO L93 Difference]: Finished difference Result 370 states and 450 transitions. [2022-02-21 00:02:19,731 INFO L276 IsEmpty]: Start isEmpty. Operand 370 states and 450 transitions. [2022-02-21 00:02:19,732 INFO L282 IsEmpty]: Finished isEmpty. No accepting run. [2022-02-21 00:02:19,732 INFO L83 IsIncluded]: Finished isIncluded. Language is included [2022-02-21 00:02:19,732 INFO L88 GeneralOperation]: Finished isEquivalent. [2022-02-21 00:02:19,732 INFO L221 AbstractMinimizeNwa]: Finished testing correctness of minimizeSevpa [2022-02-21 00:02:19,733 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 354 states, 314 states have (on average 1.2261146496815287) internal successors, (385), 319 states have internal predecessors, (385), 22 states have call successors, (22), 16 states have call predecessors, (22), 17 states have return successors, (23), 19 states have call predecessors, (23), 19 states have call successors, (23) [2022-02-21 00:02:19,739 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 354 states to 354 states and 430 transitions. [2022-02-21 00:02:19,739 INFO L78 Accepts]: Start accepts. Automaton has 354 states and 430 transitions. Word has length 68 [2022-02-21 00:02:19,741 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-02-21 00:02:19,741 INFO L470 AbstractCegarLoop]: Abstraction has 354 states and 430 transitions. [2022-02-21 00:02:19,742 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 7.0) internal successors, (63), 7 states have internal predecessors, (63), 3 states have call successors, (3), 3 states have call predecessors, (3), 1 states have return successors, (2), 2 states have call predecessors, (2), 2 states have call successors, (2) [2022-02-21 00:02:19,742 INFO L276 IsEmpty]: Start isEmpty. Operand 354 states and 430 transitions. [2022-02-21 00:02:19,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 72 [2022-02-21 00:02:19,744 INFO L506 BasicCegarLoop]: Found error trace [2022-02-21 00:02:19,744 INFO L514 BasicCegarLoop]: trace histogram [2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-02-21 00:02:19,744 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable35 [2022-02-21 00:02:19,744 INFO L402 AbstractCegarLoop]: === Iteration 37 === Targeting errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK === [errorFnErr0ASSERT_VIOLATIONMEMORY_LEAK, ULTIMATE.startErr0ASSERT_VIOLATIONMEMORY_LEAK] === [2022-02-21 00:02:19,745 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-02-21 00:02:19,745 INFO L85 PathProgramCache]: Analyzing trace with hash 162641819, now seen corresponding path program 1 times [2022-02-21 00:02:19,745 INFO L126 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-02-21 00:02:19,745 INFO L338 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [864291216] [2022-02-21 00:02:19,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-02-21 00:02:19,746 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-02-21 00:02:19,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:19,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2022-02-21 00:02:19,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:19,846 INFO L290 TraceCheckUtils]: 0: Hoare triple {68003#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {67966#true} is VALID [2022-02-21 00:02:19,847 INFO L290 TraceCheckUtils]: 1: Hoare triple {67966#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {67966#true} is VALID [2022-02-21 00:02:19,847 INFO L290 TraceCheckUtils]: 2: Hoare triple {67966#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {67966#true} is VALID [2022-02-21 00:02:19,847 INFO L290 TraceCheckUtils]: 3: Hoare triple {67966#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {67966#true} is VALID [2022-02-21 00:02:19,847 INFO L290 TraceCheckUtils]: 4: Hoare triple {67966#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,847 INFO L290 TraceCheckUtils]: 5: Hoare triple {67966#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {67966#true} is VALID [2022-02-21 00:02:19,848 INFO L290 TraceCheckUtils]: 6: Hoare triple {67966#true} assume { :end_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,848 INFO L290 TraceCheckUtils]: 7: Hoare triple {67966#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {67966#true} is VALID [2022-02-21 00:02:19,848 INFO L290 TraceCheckUtils]: 8: Hoare triple {67966#true} assume 0 == ~tmp_ndt_7~0#1; {67966#true} is VALID [2022-02-21 00:02:19,848 INFO L290 TraceCheckUtils]: 9: Hoare triple {67966#true} ~returnVal2~0#1 := 0; {67966#true} is VALID [2022-02-21 00:02:19,848 INFO L290 TraceCheckUtils]: 10: Hoare triple {67966#true} assume !(~s~0 == ~NP~0); {67966#true} is VALID [2022-02-21 00:02:19,848 INFO L290 TraceCheckUtils]: 11: Hoare triple {67966#true} assume ~s~0 == ~MPR1~0; {67966#true} is VALID [2022-02-21 00:02:19,848 INFO L290 TraceCheckUtils]: 12: Hoare triple {67966#true} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {67966#true} is VALID [2022-02-21 00:02:19,849 INFO L290 TraceCheckUtils]: 13: Hoare triple {67966#true} #res#1 := ~returnVal2~0#1; {67966#true} is VALID [2022-02-21 00:02:19,849 INFO L290 TraceCheckUtils]: 14: Hoare triple {67966#true} assume true; {67966#true} is VALID [2022-02-21 00:02:19,849 INFO L284 TraceCheckUtils]: 15: Hoare quadruple {67966#true} {67966#true} #753#return; {67966#true} is VALID [2022-02-21 00:02:19,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-02-21 00:02:19,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-02-21 00:02:19,885 INFO L290 TraceCheckUtils]: 0: Hoare triple {68003#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {67966#true} is VALID [2022-02-21 00:02:19,885 INFO L290 TraceCheckUtils]: 1: Hoare triple {67966#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {67966#true} is VALID [2022-02-21 00:02:19,885 INFO L290 TraceCheckUtils]: 2: Hoare triple {67966#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {67966#true} is VALID [2022-02-21 00:02:19,885 INFO L290 TraceCheckUtils]: 3: Hoare triple {67966#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {67966#true} is VALID [2022-02-21 00:02:19,886 INFO L290 TraceCheckUtils]: 4: Hoare triple {67966#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,886 INFO L290 TraceCheckUtils]: 5: Hoare triple {67966#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {67966#true} is VALID [2022-02-21 00:02:19,886 INFO L290 TraceCheckUtils]: 6: Hoare triple {67966#true} assume { :end_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,886 INFO L290 TraceCheckUtils]: 7: Hoare triple {67966#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {67966#true} is VALID [2022-02-21 00:02:19,886 INFO L290 TraceCheckUtils]: 8: Hoare triple {67966#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {67966#true} is VALID [2022-02-21 00:02:19,886 INFO L290 TraceCheckUtils]: 9: Hoare triple {67966#true} assume !(1 == ~tmp_ndt_8~0#1); {67966#true} is VALID [2022-02-21 00:02:19,887 INFO L290 TraceCheckUtils]: 10: Hoare triple {67966#true} ~returnVal2~0#1 := 259; {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,887 INFO L290 TraceCheckUtils]: 11: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume !(~s~0 == ~NP~0); {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,888 INFO L290 TraceCheckUtils]: 12: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume ~s~0 == ~MPR1~0; {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,888 INFO L290 TraceCheckUtils]: 13: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,888 INFO L290 TraceCheckUtils]: 14: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} #res#1 := ~returnVal2~0#1; {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:19,889 INFO L290 TraceCheckUtils]: 15: Hoare triple {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} assume true; {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:19,890 INFO L284 TraceCheckUtils]: 16: Hoare quadruple {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} {67966#true} #757#return; {68001#(= 259 |ULTIMATE.start_FlFdcDeviceIo_#t~ret87#1|)} is VALID [2022-02-21 00:02:19,890 INFO L290 TraceCheckUtils]: 0: Hoare triple {67966#true} assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(22, 2);call #Ultimate.allocInit(12, 3);~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;~PagingReferenceCount~0 := 0;~PagingMutex~0 := 0; {67966#true} is VALID [2022-02-21 00:02:19,890 INFO L290 TraceCheckUtils]: 1: Hoare triple {67966#true} assume { :end_inline_ULTIMATE.init } true;main_old_#valid#1 := #valid;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~nondet89#1, main_#t~nondet90#1, main_#t~nondet91#1, main_#t~nondet92#1, main_#t~ret93#1, main_~tmp_ndt_1~0#1, main_~status~1#1, main_~irp~1#1, main_~pirp~0#1, main_~pirp__IoStatus__Status~0#1, main_~irp_choice~0#1, main_~devobj~0#1, main_~__cil_tmp8~0#1;havoc main_~status~1#1;assume -2147483648 <= main_#t~nondet89#1 && main_#t~nondet89#1 <= 2147483647;main_~irp~1#1 := main_#t~nondet89#1;havoc main_#t~nondet89#1;havoc main_~pirp~0#1;havoc main_~pirp__IoStatus__Status~0#1;assume -2147483648 <= main_#t~nondet90#1 && main_#t~nondet90#1 <= 2147483647;main_~irp_choice~0#1 := main_#t~nondet90#1;havoc main_#t~nondet90#1;assume -2147483648 <= main_#t~nondet91#1 && main_#t~nondet91#1 <= 2147483647;main_~devobj~0#1 := main_#t~nondet91#1;havoc main_#t~nondet91#1;havoc main_~__cil_tmp8~0#1;~FloppyThread~0 := 0;~KernelMode~0 := 0;~Suspended~0 := 0;~Executive~0 := 0;~DiskController~0 := 0;~FloppyDiskPeripheral~0 := 0;~FlConfigCallBack~0 := 0;~MaximumInterfaceType~0 := 0;~MOUNTDEV_MOUNTED_DEVICE_GUID~0 := 0;~myStatus~0 := 0;~s~0 := 0;~UNLOADED~0 := 0;~NP~0 := 0;~DC~0 := 0;~SKIP1~0 := 0;~SKIP2~0 := 0;~MPR1~0 := 0;~MPR3~0 := 0;~IPC~0 := 0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0;main_~status~1#1 := 0;main_~pirp~0#1 := main_~irp~1#1;assume { :begin_inline__BLAST_init } true;~UNLOADED~0 := 0;~NP~0 := 1;~DC~0 := 2;~SKIP1~0 := 3;~SKIP2~0 := 4;~MPR1~0 := 5;~MPR3~0 := 6;~IPC~0 := 7;~s~0 := ~UNLOADED~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {67966#true} is VALID [2022-02-21 00:02:19,890 INFO L290 TraceCheckUtils]: 2: Hoare triple {67966#true} assume { :end_inline__BLAST_init } true; {67966#true} is VALID [2022-02-21 00:02:19,890 INFO L290 TraceCheckUtils]: 3: Hoare triple {67966#true} assume main_~status~1#1 >= 0;~s~0 := ~NP~0;~customIrp~0 := 0;~setEventCalled~0 := ~customIrp~0;~lowerDriverReturn~0 := ~setEventCalled~0;~compRegistered~0 := ~lowerDriverReturn~0;~pended~0 := ~compRegistered~0;main_~pirp__IoStatus__Status~0#1 := 0;~myStatus~0 := 0; {67966#true} is VALID [2022-02-21 00:02:19,891 INFO L290 TraceCheckUtils]: 4: Hoare triple {67966#true} assume 0 == main_~irp_choice~0#1;main_~pirp__IoStatus__Status~0#1 := -1073741637;~myStatus~0 := -1073741637; {67966#true} is VALID [2022-02-21 00:02:19,891 INFO L290 TraceCheckUtils]: 5: Hoare triple {67966#true} assume { :begin_inline_stub_driver_init } true;~s~0 := ~NP~0;~pended~0 := 0;~compRegistered~0 := 0;~lowerDriverReturn~0 := 0;~setEventCalled~0 := 0;~customIrp~0 := 0; {67966#true} is VALID [2022-02-21 00:02:19,891 INFO L290 TraceCheckUtils]: 6: Hoare triple {67966#true} assume { :end_inline_stub_driver_init } true; {67966#true} is VALID [2022-02-21 00:02:19,891 INFO L290 TraceCheckUtils]: 7: Hoare triple {67966#true} assume !(main_~status~1#1 < 0);havoc main_~tmp_ndt_1~0#1;assume -2147483648 <= main_#t~nondet92#1 && main_#t~nondet92#1 <= 2147483647;main_~tmp_ndt_1~0#1 := main_#t~nondet92#1;havoc main_#t~nondet92#1; {67966#true} is VALID [2022-02-21 00:02:19,891 INFO L290 TraceCheckUtils]: 8: Hoare triple {67966#true} assume 3 == main_~tmp_ndt_1~0#1; {67966#true} is VALID [2022-02-21 00:02:19,891 INFO L290 TraceCheckUtils]: 9: Hoare triple {67966#true} assume { :begin_inline_FloppyPnp } true;FloppyPnp_#in~DeviceObject#1, FloppyPnp_#in~Irp#1 := main_~devobj~0#1, main_~pirp~0#1;havoc FloppyPnp_#res#1;havoc FloppyPnp_#t~nondet16#1, FloppyPnp_#t~nondet17#1, FloppyPnp_#t~nondet18#1, FloppyPnp_#t~nondet19#1, FloppyPnp_#t~nondet20#1, FloppyPnp_#t~nondet21#1, FloppyPnp_#t~nondet22#1, FloppyPnp_#t~nondet23#1, FloppyPnp_#t~nondet24#1, FloppyPnp_#t~nondet25#1, FloppyPnp_#t~nondet26#1, FloppyPnp_#t~nondet27#1, FloppyPnp_#t~nondet28#1, FloppyPnp_#t~nondet29#1, FloppyPnp_#t~post30#1, FloppyPnp_#t~ret31#1, FloppyPnp_#t~post32#1, FloppyPnp_#t~post33#1, FloppyPnp_#t~ret34#1, FloppyPnp_#t~ret35#1, FloppyPnp_#t~ret36#1, FloppyPnp_#t~post37#1, FloppyPnp_#t~post38#1, FloppyPnp_#t~ret39#1, FloppyPnp_#t~post40#1, FloppyPnp_#t~post41#1, FloppyPnp_#t~ret42#1, FloppyPnp_#t~ret43#1, FloppyPnp_#t~ret44#1, FloppyPnp_#t~post45#1, FloppyPnp_#t~post46#1, FloppyPnp_#t~ret47#1, FloppyPnp_#t~post48#1, FloppyPnp_#t~post49#1, FloppyPnp_#t~ret50#1, FloppyPnp_#t~ret51#1, FloppyPnp_#t~ret52#1, FloppyPnp_#t~post53#1, FloppyPnp_#t~post54#1, FloppyPnp_#t~post55#1, FloppyPnp_#t~ret56#1, FloppyPnp_#t~post57#1, FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1, FloppyPnp_~DeviceObject__DeviceExtension~0#1, FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1, FloppyPnp_~Irp__IoStatus__Information~1#1, FloppyPnp_~Irp__IoStatus__Status~1#1, FloppyPnp_~Irp__CurrentLocation~0#1, FloppyPnp_~disketteExtension__IsRemoved~0#1, FloppyPnp_~disketteExtension__IsStarted~0#1, FloppyPnp_~disketteExtension__TargetObject~0#1, FloppyPnp_~disketteExtension__HoldNewRequests~0#1, FloppyPnp_~disketteExtension__FloppyThread~0#1, FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1, FloppyPnp_~disketteExtension__InterfaceString~0#1, FloppyPnp_~disketteExtension__ArcName__Length~0#1, FloppyPnp_~disketteExtension__ArcName~0#1, FloppyPnp_~irpSp__MinorFunction~0#1, FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1, FloppyPnp_~irpSp~0#1, FloppyPnp_~disketteExtension~0#1, FloppyPnp_~ntStatus~0#1, FloppyPnp_~doneEvent~0#1, FloppyPnp_~irpSp___0~0#1, FloppyPnp_~nextIrpSp~0#1, FloppyPnp_~nextIrpSp__Control~0#1, FloppyPnp_~irpSp___1~0#1, FloppyPnp_~irpSp__Context~0#1, FloppyPnp_~irpSp__Control~0#1, FloppyPnp_~__cil_tmp29~0#1, FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~DeviceObject#1 := FloppyPnp_#in~DeviceObject#1;FloppyPnp_~Irp#1 := FloppyPnp_#in~Irp#1;assume -2147483648 <= FloppyPnp_#t~nondet16#1 && FloppyPnp_#t~nondet16#1 <= 2147483647;FloppyPnp_~DeviceObject__DeviceExtension~0#1 := FloppyPnp_#t~nondet16#1;havoc FloppyPnp_#t~nondet16#1;assume -2147483648 <= FloppyPnp_#t~nondet17#1 && FloppyPnp_#t~nondet17#1 <= 2147483647;FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1 := FloppyPnp_#t~nondet17#1;havoc FloppyPnp_#t~nondet17#1;havoc FloppyPnp_~Irp__IoStatus__Information~1#1;havoc FloppyPnp_~Irp__IoStatus__Status~1#1;assume -2147483648 <= FloppyPnp_#t~nondet18#1 && FloppyPnp_#t~nondet18#1 <= 2147483647;FloppyPnp_~Irp__CurrentLocation~0#1 := FloppyPnp_#t~nondet18#1;havoc FloppyPnp_#t~nondet18#1;assume -2147483648 <= FloppyPnp_#t~nondet19#1 && FloppyPnp_#t~nondet19#1 <= 2147483647;FloppyPnp_~disketteExtension__IsRemoved~0#1 := FloppyPnp_#t~nondet19#1;havoc FloppyPnp_#t~nondet19#1;assume -2147483648 <= FloppyPnp_#t~nondet20#1 && FloppyPnp_#t~nondet20#1 <= 2147483647;FloppyPnp_~disketteExtension__IsStarted~0#1 := FloppyPnp_#t~nondet20#1;havoc FloppyPnp_#t~nondet20#1;assume -2147483648 <= FloppyPnp_#t~nondet21#1 && FloppyPnp_#t~nondet21#1 <= 2147483647;FloppyPnp_~disketteExtension__TargetObject~0#1 := FloppyPnp_#t~nondet21#1;havoc FloppyPnp_#t~nondet21#1;havoc FloppyPnp_~disketteExtension__HoldNewRequests~0#1;assume -2147483648 <= FloppyPnp_#t~nondet22#1 && FloppyPnp_#t~nondet22#1 <= 2147483647;FloppyPnp_~disketteExtension__FloppyThread~0#1 := FloppyPnp_#t~nondet22#1;havoc FloppyPnp_#t~nondet22#1;assume -2147483648 <= FloppyPnp_#t~nondet23#1 && FloppyPnp_#t~nondet23#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString__Buffer~0#1 := FloppyPnp_#t~nondet23#1;havoc FloppyPnp_#t~nondet23#1;assume -2147483648 <= FloppyPnp_#t~nondet24#1 && FloppyPnp_#t~nondet24#1 <= 2147483647;FloppyPnp_~disketteExtension__InterfaceString~0#1 := FloppyPnp_#t~nondet24#1;havoc FloppyPnp_#t~nondet24#1;assume -2147483648 <= FloppyPnp_#t~nondet25#1 && FloppyPnp_#t~nondet25#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName__Length~0#1 := FloppyPnp_#t~nondet25#1;havoc FloppyPnp_#t~nondet25#1;assume -2147483648 <= FloppyPnp_#t~nondet26#1 && FloppyPnp_#t~nondet26#1 <= 2147483647;FloppyPnp_~disketteExtension__ArcName~0#1 := FloppyPnp_#t~nondet26#1;havoc FloppyPnp_#t~nondet26#1;assume -2147483648 <= FloppyPnp_#t~nondet27#1 && FloppyPnp_#t~nondet27#1 <= 2147483647;FloppyPnp_~irpSp__MinorFunction~0#1 := FloppyPnp_#t~nondet27#1;havoc FloppyPnp_#t~nondet27#1;assume -2147483648 <= FloppyPnp_#t~nondet28#1 && FloppyPnp_#t~nondet28#1 <= 2147483647;FloppyPnp_~IoGetConfigurationInformation__FloppyCount~0#1 := FloppyPnp_#t~nondet28#1;havoc FloppyPnp_#t~nondet28#1;havoc FloppyPnp_~irpSp~0#1;havoc FloppyPnp_~disketteExtension~0#1;havoc FloppyPnp_~ntStatus~0#1;assume -2147483648 <= FloppyPnp_#t~nondet29#1 && FloppyPnp_#t~nondet29#1 <= 2147483647;FloppyPnp_~doneEvent~0#1 := FloppyPnp_#t~nondet29#1;havoc FloppyPnp_#t~nondet29#1;havoc FloppyPnp_~irpSp___0~0#1;havoc FloppyPnp_~nextIrpSp~0#1;havoc FloppyPnp_~nextIrpSp__Control~0#1;havoc FloppyPnp_~irpSp___1~0#1;havoc FloppyPnp_~irpSp__Context~0#1;havoc FloppyPnp_~irpSp__Control~0#1;havoc FloppyPnp_~__cil_tmp29~0#1;havoc FloppyPnp_~__cil_tmp30~0#1;FloppyPnp_~ntStatus~0#1 := 0;FloppyPnp_#t~post30#1 := ~PagingReferenceCount~0;~PagingReferenceCount~0 := 1 + FloppyPnp_#t~post30#1;havoc FloppyPnp_#t~post30#1; {67966#true} is VALID [2022-02-21 00:02:19,892 INFO L290 TraceCheckUtils]: 10: Hoare triple {67966#true} assume 1 == ~PagingReferenceCount~0; {67966#true} is VALID [2022-02-21 00:02:19,892 INFO L290 TraceCheckUtils]: 11: Hoare triple {67966#true} FloppyPnp_~disketteExtension~0#1 := FloppyPnp_~DeviceObject__DeviceExtension~0#1;FloppyPnp_~irpSp~0#1 := FloppyPnp_~Irp__Tail__Overlay__CurrentStackLocation~0#1; {67966#true} is VALID [2022-02-21 00:02:19,892 INFO L290 TraceCheckUtils]: 12: Hoare triple {67966#true} assume !(0 != FloppyPnp_~disketteExtension__IsRemoved~0#1); {67966#true} is VALID [2022-02-21 00:02:19,892 INFO L290 TraceCheckUtils]: 13: Hoare triple {67966#true} assume 0 == FloppyPnp_~irpSp__MinorFunction~0#1; {67966#true} is VALID [2022-02-21 00:02:19,892 INFO L290 TraceCheckUtils]: 14: Hoare triple {67966#true} assume { :begin_inline_FloppyStartDevice } true;FloppyStartDevice_#in~DeviceObject#1, FloppyStartDevice_#in~Irp#1 := FloppyPnp_~DeviceObject#1, FloppyPnp_~Irp#1;havoc FloppyStartDevice_#res#1;havoc FloppyStartDevice_#t~nondet58#1, FloppyStartDevice_#t~nondet59#1, FloppyStartDevice_#t~nondet60#1, FloppyStartDevice_#t~nondet61#1, FloppyStartDevice_#t~nondet62#1, FloppyStartDevice_#t~nondet63#1, FloppyStartDevice_#t~nondet64#1, FloppyStartDevice_#t~nondet65#1, FloppyStartDevice_#t~nondet66#1, FloppyStartDevice_#t~nondet67#1, FloppyStartDevice_#t~nondet68#1, FloppyStartDevice_#t~nondet69#1, FloppyStartDevice_#t~nondet70#1, FloppyStartDevice_#t~nondet71#1, FloppyStartDevice_#t~nondet72#1, FloppyStartDevice_#t~nondet73#1, FloppyStartDevice_#t~ret74#1, FloppyStartDevice_#t~ret75#1, FloppyStartDevice_#t~ret76#1, FloppyStartDevice_#t~ret77#1, FloppyStartDevice_#t~ret78#1, FloppyStartDevice_#t~post79#1, FloppyStartDevice_#t~ret80#1, FloppyStartDevice_#t~ret81#1, FloppyStartDevice_~DeviceObject#1, FloppyStartDevice_~Irp#1, FloppyStartDevice_~DeviceObject__DeviceExtension~1#1, FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1, FloppyStartDevice_~Irp__IoStatus__Status~2#1, FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1, FloppyStartDevice_~disketteExtension__DriveType~0#1, FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1, FloppyStartDevice_~disketteExtension__DeviceUnit~0#1, FloppyStartDevice_~disketteExtension__DriveOnValue~0#1, FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1, FloppyStartDevice_~disketteExtension__InterfaceString~1#1, FloppyStartDevice_~disketteExtension__IsStarted~1#1, FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1, FloppyStartDevice_~ntStatus~1#1, FloppyStartDevice_~pnpStatus~0#1, FloppyStartDevice_~doneEvent~1#1, FloppyStartDevice_~fdcInfo~0#1, FloppyStartDevice_~fdcInfo__BufferCount~0#1, FloppyStartDevice_~fdcInfo__BufferSize~0#1, FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1, FloppyStartDevice_~fdcInfo__AcpiBios~0#1, FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1, FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1, FloppyStartDevice_~fdcInfo__BusType~0#1, FloppyStartDevice_~fdcInfo__ControllerNumber~0#1, FloppyStartDevice_~fdcInfo__UnitNumber~0#1, FloppyStartDevice_~fdcInfo__BusNumber~0#1, FloppyStartDevice_~Dc~0#1, FloppyStartDevice_~Fp~0#1, FloppyStartDevice_~disketteExtension~1#1, FloppyStartDevice_~irpSp~1#1, FloppyStartDevice_~irpSp___0~1#1, FloppyStartDevice_~nextIrpSp~1#1, FloppyStartDevice_~nextIrpSp__Control~1#1, FloppyStartDevice_~irpSp___1~1#1, FloppyStartDevice_~irpSp__Control~1#1, FloppyStartDevice_~irpSp__Context~1#1, FloppyStartDevice_~InterfaceType~0#1, FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1, FloppyStartDevice_~__cil_tmp42~0#1, FloppyStartDevice_~__cil_tmp43~0#1, FloppyStartDevice_~__cil_tmp44~0#1, FloppyStartDevice_~__cil_tmp45~0#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~__cil_tmp47~0#1, FloppyStartDevice_~__cil_tmp48~0#1, FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~DeviceObject#1 := FloppyStartDevice_#in~DeviceObject#1;FloppyStartDevice_~Irp#1 := FloppyStartDevice_#in~Irp#1;assume -2147483648 <= FloppyStartDevice_#t~nondet58#1 && FloppyStartDevice_#t~nondet58#1 <= 2147483647;FloppyStartDevice_~DeviceObject__DeviceExtension~1#1 := FloppyStartDevice_#t~nondet58#1;havoc FloppyStartDevice_#t~nondet58#1;assume -2147483648 <= FloppyStartDevice_#t~nondet59#1 && FloppyStartDevice_#t~nondet59#1 <= 2147483647;FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 := FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_#t~nondet59#1;havoc FloppyStartDevice_~Irp__IoStatus__Status~2#1;assume -2147483648 <= FloppyStartDevice_#t~nondet60#1 && FloppyStartDevice_#t~nondet60#1 <= 2147483647;FloppyStartDevice_~disketteExtension__TargetObject~1#1 := FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_#t~nondet60#1;havoc FloppyStartDevice_~disketteExtension__MaxTransferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet61#1 && FloppyStartDevice_#t~nondet61#1 <= 2147483647;FloppyStartDevice_~disketteExtension__DriveType~0#1 := FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_#t~nondet61#1;havoc FloppyStartDevice_~disketteExtension__PerpendicularMode~0#1;havoc FloppyStartDevice_~disketteExtension__DeviceUnit~0#1;havoc FloppyStartDevice_~disketteExtension__DriveOnValue~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet62#1 && FloppyStartDevice_#t~nondet62#1 <= 2147483647;FloppyStartDevice_~disketteExtension__UnderlyingPDO~0#1 := FloppyStartDevice_#t~nondet62#1;havoc FloppyStartDevice_#t~nondet62#1;assume -2147483648 <= FloppyStartDevice_#t~nondet63#1 && FloppyStartDevice_#t~nondet63#1 <= 2147483647;FloppyStartDevice_~disketteExtension__InterfaceString~1#1 := FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_#t~nondet63#1;havoc FloppyStartDevice_~disketteExtension__IsStarted~1#1;havoc FloppyStartDevice_~disketteExtension__HoldNewRequests~1#1;havoc FloppyStartDevice_~ntStatus~1#1;havoc FloppyStartDevice_~pnpStatus~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet64#1 && FloppyStartDevice_#t~nondet64#1 <= 2147483647;FloppyStartDevice_~doneEvent~1#1 := FloppyStartDevice_#t~nondet64#1;havoc FloppyStartDevice_#t~nondet64#1;assume -2147483648 <= FloppyStartDevice_#t~nondet65#1 && FloppyStartDevice_#t~nondet65#1 <= 2147483647;FloppyStartDevice_~fdcInfo~0#1 := FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_#t~nondet65#1;havoc FloppyStartDevice_~fdcInfo__BufferCount~0#1;havoc FloppyStartDevice_~fdcInfo__BufferSize~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet66#1 && FloppyStartDevice_#t~nondet66#1 <= 2147483647;FloppyStartDevice_~fdcInfo__MaxTransferSize~0#1 := FloppyStartDevice_#t~nondet66#1;havoc FloppyStartDevice_#t~nondet66#1;assume -2147483648 <= FloppyStartDevice_#t~nondet67#1 && FloppyStartDevice_#t~nondet67#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiBios~0#1 := FloppyStartDevice_#t~nondet67#1;havoc FloppyStartDevice_#t~nondet67#1;assume -2147483648 <= FloppyStartDevice_#t~nondet68#1 && FloppyStartDevice_#t~nondet68#1 <= 2147483647;FloppyStartDevice_~fdcInfo__AcpiFdiSupported~0#1 := FloppyStartDevice_#t~nondet68#1;havoc FloppyStartDevice_#t~nondet68#1;assume -2147483648 <= FloppyStartDevice_#t~nondet69#1 && FloppyStartDevice_#t~nondet69#1 <= 2147483647;FloppyStartDevice_~fdcInfo__PeripheralNumber~0#1 := FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_#t~nondet69#1;havoc FloppyStartDevice_~fdcInfo__BusType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet70#1 && FloppyStartDevice_#t~nondet70#1 <= 2147483647;FloppyStartDevice_~fdcInfo__ControllerNumber~0#1 := FloppyStartDevice_#t~nondet70#1;havoc FloppyStartDevice_#t~nondet70#1;assume -2147483648 <= FloppyStartDevice_#t~nondet71#1 && FloppyStartDevice_#t~nondet71#1 <= 2147483647;FloppyStartDevice_~fdcInfo__UnitNumber~0#1 := FloppyStartDevice_#t~nondet71#1;havoc FloppyStartDevice_#t~nondet71#1;assume -2147483648 <= FloppyStartDevice_#t~nondet72#1 && FloppyStartDevice_#t~nondet72#1 <= 2147483647;FloppyStartDevice_~fdcInfo__BusNumber~0#1 := FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_#t~nondet72#1;havoc FloppyStartDevice_~Dc~0#1;havoc FloppyStartDevice_~Fp~0#1;havoc FloppyStartDevice_~disketteExtension~1#1;havoc FloppyStartDevice_~irpSp~1#1;havoc FloppyStartDevice_~irpSp___0~1#1;havoc FloppyStartDevice_~nextIrpSp~1#1;havoc FloppyStartDevice_~nextIrpSp__Control~1#1;havoc FloppyStartDevice_~irpSp___1~1#1;havoc FloppyStartDevice_~irpSp__Control~1#1;havoc FloppyStartDevice_~irpSp__Context~1#1;havoc FloppyStartDevice_~InterfaceType~0#1;assume -2147483648 <= FloppyStartDevice_#t~nondet73#1 && FloppyStartDevice_#t~nondet73#1 <= 2147483647;FloppyStartDevice_~KUSER_SHARED_DATA__AlternativeArchitecture_NEC98x86~0#1 := FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_#t~nondet73#1;havoc FloppyStartDevice_~__cil_tmp42~0#1;havoc FloppyStartDevice_~__cil_tmp43~0#1;havoc FloppyStartDevice_~__cil_tmp44~0#1;havoc FloppyStartDevice_~__cil_tmp45~0#1;havoc FloppyStartDevice_~__cil_tmp46~0#1;havoc FloppyStartDevice_~__cil_tmp47~0#1;havoc FloppyStartDevice_~__cil_tmp48~0#1;havoc FloppyStartDevice_~__cil_tmp49~0#1;FloppyStartDevice_~Dc~0#1 := ~DiskController~0;FloppyStartDevice_~Fp~0#1 := ~FloppyDiskPeripheral~0;FloppyStartDevice_~disketteExtension~1#1 := FloppyStartDevice_~DeviceObject__DeviceExtension~1#1;FloppyStartDevice_~irpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~irpSp___0~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1;FloppyStartDevice_~nextIrpSp~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~nextIrpSp__Control~1#1 := 0; {67966#true} is VALID [2022-02-21 00:02:19,893 INFO L290 TraceCheckUtils]: 15: Hoare triple {67966#true} assume !(~s~0 != ~NP~0); {67966#true} is VALID [2022-02-21 00:02:19,893 INFO L290 TraceCheckUtils]: 16: Hoare triple {67966#true} assume !(0 != ~compRegistered~0);~compRegistered~0 := 1; {67966#true} is VALID [2022-02-21 00:02:19,893 INFO L290 TraceCheckUtils]: 17: Hoare triple {67966#true} FloppyStartDevice_~irpSp___1~1#1 := FloppyStartDevice_~Irp__Tail__Overlay__CurrentStackLocation~1#1 - 1;FloppyStartDevice_~irpSp__Context~1#1 := FloppyStartDevice_~doneEvent~1#1;FloppyStartDevice_~irpSp__Control~1#1 := 224; {67966#true} is VALID [2022-02-21 00:02:19,894 INFO L272 TraceCheckUtils]: 18: Hoare triple {67966#true} call FloppyStartDevice_#t~ret74#1 := IofCallDriver(FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~Irp#1); {68003#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:19,894 INFO L290 TraceCheckUtils]: 19: Hoare triple {68003#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {67966#true} is VALID [2022-02-21 00:02:19,894 INFO L290 TraceCheckUtils]: 20: Hoare triple {67966#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {67966#true} is VALID [2022-02-21 00:02:19,894 INFO L290 TraceCheckUtils]: 21: Hoare triple {67966#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {67966#true} is VALID [2022-02-21 00:02:19,894 INFO L290 TraceCheckUtils]: 22: Hoare triple {67966#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {67966#true} is VALID [2022-02-21 00:02:19,894 INFO L290 TraceCheckUtils]: 23: Hoare triple {67966#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,895 INFO L290 TraceCheckUtils]: 24: Hoare triple {67966#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {67966#true} is VALID [2022-02-21 00:02:19,895 INFO L290 TraceCheckUtils]: 25: Hoare triple {67966#true} assume { :end_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,895 INFO L290 TraceCheckUtils]: 26: Hoare triple {67966#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {67966#true} is VALID [2022-02-21 00:02:19,895 INFO L290 TraceCheckUtils]: 27: Hoare triple {67966#true} assume 0 == ~tmp_ndt_7~0#1; {67966#true} is VALID [2022-02-21 00:02:19,895 INFO L290 TraceCheckUtils]: 28: Hoare triple {67966#true} ~returnVal2~0#1 := 0; {67966#true} is VALID [2022-02-21 00:02:19,895 INFO L290 TraceCheckUtils]: 29: Hoare triple {67966#true} assume !(~s~0 == ~NP~0); {67966#true} is VALID [2022-02-21 00:02:19,896 INFO L290 TraceCheckUtils]: 30: Hoare triple {67966#true} assume ~s~0 == ~MPR1~0; {67966#true} is VALID [2022-02-21 00:02:19,896 INFO L290 TraceCheckUtils]: 31: Hoare triple {67966#true} assume !(259 == ~returnVal2~0#1);~s~0 := ~NP~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {67966#true} is VALID [2022-02-21 00:02:19,896 INFO L290 TraceCheckUtils]: 32: Hoare triple {67966#true} #res#1 := ~returnVal2~0#1; {67966#true} is VALID [2022-02-21 00:02:19,896 INFO L290 TraceCheckUtils]: 33: Hoare triple {67966#true} assume true; {67966#true} is VALID [2022-02-21 00:02:19,896 INFO L284 TraceCheckUtils]: 34: Hoare quadruple {67966#true} {67966#true} #753#return; {67966#true} is VALID [2022-02-21 00:02:19,896 INFO L290 TraceCheckUtils]: 35: Hoare triple {67966#true} assume -2147483648 <= FloppyStartDevice_#t~ret74#1 && FloppyStartDevice_#t~ret74#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret74#1;havoc FloppyStartDevice_#t~ret74#1;FloppyStartDevice_~__cil_tmp42~0#1 := FloppyStartDevice_~ntStatus~1#1; {67966#true} is VALID [2022-02-21 00:02:19,896 INFO L290 TraceCheckUtils]: 36: Hoare triple {67966#true} assume !(259 == FloppyStartDevice_~__cil_tmp42~0#1); {67966#true} is VALID [2022-02-21 00:02:19,897 INFO L290 TraceCheckUtils]: 37: Hoare triple {67966#true} FloppyStartDevice_~fdcInfo__BufferCount~0#1 := 0;FloppyStartDevice_~fdcInfo__BufferSize~0#1 := 0;FloppyStartDevice_~__cil_tmp43~0#1 := 3080;FloppyStartDevice_~__cil_tmp44~0#1 := 458752;FloppyStartDevice_~__cil_tmp45~0#1 := 461832;FloppyStartDevice_~__cil_tmp46~0#1 := 461835;assume { :begin_inline_FlFdcDeviceIo } true;FlFdcDeviceIo_#in~DeviceObject#1, FlFdcDeviceIo_#in~Ioctl#1, FlFdcDeviceIo_#in~Data#1 := FloppyStartDevice_~disketteExtension__TargetObject~1#1, FloppyStartDevice_~__cil_tmp46~0#1, FloppyStartDevice_~fdcInfo~0#1;havoc FlFdcDeviceIo_#res#1;havoc FlFdcDeviceIo_#t~nondet83#1, FlFdcDeviceIo_#t~nondet84#1, FlFdcDeviceIo_#t~nondet85#1, FlFdcDeviceIo_#t~ret86#1, FlFdcDeviceIo_#t~ret87#1, FlFdcDeviceIo_#t~ret88#1, FlFdcDeviceIo_~DeviceObject#1, FlFdcDeviceIo_~Ioctl#1, FlFdcDeviceIo_~Data#1, FlFdcDeviceIo_~ntStatus~2#1, FlFdcDeviceIo_~irp~0#1, FlFdcDeviceIo_~irpStack~0#1, FlFdcDeviceIo_~doneEvent~2#1, FlFdcDeviceIo_~ioStatus~0#1, FlFdcDeviceIo_~irp__Tail__Overlay__CurrentStackLocation~0#1, FlFdcDeviceIo_~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0#1, FlFdcDeviceIo_~__cil_tmp11~0#1;FlFdcDeviceIo_~DeviceObject#1 := FlFdcDeviceIo_#in~DeviceObject#1;FlFdcDeviceIo_~Ioctl#1 := FlFdcDeviceIo_#in~Ioctl#1;FlFdcDeviceIo_~Data#1 := FlFdcDeviceIo_#in~Data#1;havoc FlFdcDeviceIo_~ntStatus~2#1;havoc FlFdcDeviceIo_~irp~0#1;havoc FlFdcDeviceIo_~irpStack~0#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet83#1 && FlFdcDeviceIo_#t~nondet83#1 <= 2147483647;FlFdcDeviceIo_~doneEvent~2#1 := FlFdcDeviceIo_#t~nondet83#1;havoc FlFdcDeviceIo_#t~nondet83#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet84#1 && FlFdcDeviceIo_#t~nondet84#1 <= 2147483647;FlFdcDeviceIo_~ioStatus~0#1 := FlFdcDeviceIo_#t~nondet84#1;havoc FlFdcDeviceIo_#t~nondet84#1;assume -2147483648 <= FlFdcDeviceIo_#t~nondet85#1 && FlFdcDeviceIo_#t~nondet85#1 <= 2147483647;FlFdcDeviceIo_~irp__Tail__Overlay__CurrentStackLocation~0#1 := FlFdcDeviceIo_#t~nondet85#1;havoc FlFdcDeviceIo_#t~nondet85#1;havoc FlFdcDeviceIo_~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0#1;havoc FlFdcDeviceIo_~__cil_tmp11~0#1;assume { :begin_inline_IoBuildDeviceIoControlRequest } true;IoBuildDeviceIoControlRequest_#in~IoControlCode#1, IoBuildDeviceIoControlRequest_#in~DeviceObject#1, IoBuildDeviceIoControlRequest_#in~InputBuffer#1, IoBuildDeviceIoControlRequest_#in~InputBufferLength#1, IoBuildDeviceIoControlRequest_#in~OutputBuffer#1, IoBuildDeviceIoControlRequest_#in~OutputBufferLength#1, IoBuildDeviceIoControlRequest_#in~InternalDeviceIoControl#1, IoBuildDeviceIoControlRequest_#in~Event#1, IoBuildDeviceIoControlRequest_#in~IoStatusBlock#1 := FlFdcDeviceIo_~Ioctl#1, FlFdcDeviceIo_~DeviceObject#1, 0, 0, 0, 0, 1, FlFdcDeviceIo_~doneEvent~2#1, FlFdcDeviceIo_~ioStatus~0#1;havoc IoBuildDeviceIoControlRequest_#res#1;havoc IoBuildDeviceIoControlRequest_#t~nondet94#1, IoBuildDeviceIoControlRequest_#t~nondet95#1, IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1, IoBuildDeviceIoControlRequest_~IoControlCode#1, IoBuildDeviceIoControlRequest_~DeviceObject#1, IoBuildDeviceIoControlRequest_~InputBuffer#1, IoBuildDeviceIoControlRequest_~InputBufferLength#1, IoBuildDeviceIoControlRequest_~OutputBuffer#1, IoBuildDeviceIoControlRequest_~OutputBufferLength#1, IoBuildDeviceIoControlRequest_~InternalDeviceIoControl#1, IoBuildDeviceIoControlRequest_~Event#1, IoBuildDeviceIoControlRequest_~IoStatusBlock#1, IoBuildDeviceIoControlRequest_~malloc~0#1;IoBuildDeviceIoControlRequest_~IoControlCode#1 := IoBuildDeviceIoControlRequest_#in~IoControlCode#1;IoBuildDeviceIoControlRequest_~DeviceObject#1 := IoBuildDeviceIoControlRequest_#in~DeviceObject#1;IoBuildDeviceIoControlRequest_~InputBuffer#1 := IoBuildDeviceIoControlRequest_#in~InputBuffer#1;IoBuildDeviceIoControlRequest_~InputBufferLength#1 := IoBuildDeviceIoControlRequest_#in~InputBufferLength#1;IoBuildDeviceIoControlRequest_~OutputBuffer#1 := IoBuildDeviceIoControlRequest_#in~OutputBuffer#1;IoBuildDeviceIoControlRequest_~OutputBufferLength#1 := IoBuildDeviceIoControlRequest_#in~OutputBufferLength#1;IoBuildDeviceIoControlRequest_~InternalDeviceIoControl#1 := IoBuildDeviceIoControlRequest_#in~InternalDeviceIoControl#1;IoBuildDeviceIoControlRequest_~Event#1 := IoBuildDeviceIoControlRequest_#in~Event#1;IoBuildDeviceIoControlRequest_~IoStatusBlock#1 := IoBuildDeviceIoControlRequest_#in~IoStatusBlock#1;assume -2147483648 <= IoBuildDeviceIoControlRequest_#t~nondet94#1 && IoBuildDeviceIoControlRequest_#t~nondet94#1 <= 2147483647;IoBuildDeviceIoControlRequest_~malloc~0#1 := IoBuildDeviceIoControlRequest_#t~nondet94#1;havoc IoBuildDeviceIoControlRequest_#t~nondet94#1;~customIrp~0 := 1;havoc IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1;assume -2147483648 <= IoBuildDeviceIoControlRequest_#t~nondet95#1 && IoBuildDeviceIoControlRequest_#t~nondet95#1 <= 2147483647;IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1 := IoBuildDeviceIoControlRequest_#t~nondet95#1;havoc IoBuildDeviceIoControlRequest_#t~nondet95#1; {67966#true} is VALID [2022-02-21 00:02:19,897 INFO L290 TraceCheckUtils]: 38: Hoare triple {67966#true} assume 0 == IoBuildDeviceIoControlRequest_~tmp_ndt_2~0#1; {67966#true} is VALID [2022-02-21 00:02:19,897 INFO L290 TraceCheckUtils]: 39: Hoare triple {67966#true} IoBuildDeviceIoControlRequest_#res#1 := IoBuildDeviceIoControlRequest_~malloc~0#1; {67966#true} is VALID [2022-02-21 00:02:19,897 INFO L290 TraceCheckUtils]: 40: Hoare triple {67966#true} FlFdcDeviceIo_#t~ret86#1 := IoBuildDeviceIoControlRequest_#res#1;assume { :end_inline_IoBuildDeviceIoControlRequest } true;assume -2147483648 <= FlFdcDeviceIo_#t~ret86#1 && FlFdcDeviceIo_#t~ret86#1 <= 2147483647;FlFdcDeviceIo_~irp~0#1 := FlFdcDeviceIo_#t~ret86#1;havoc FlFdcDeviceIo_#t~ret86#1; {67966#true} is VALID [2022-02-21 00:02:19,897 INFO L290 TraceCheckUtils]: 41: Hoare triple {67966#true} assume !(0 == FlFdcDeviceIo_~irp~0#1);FlFdcDeviceIo_~irpStack~0#1 := FlFdcDeviceIo_~irp__Tail__Overlay__CurrentStackLocation~0#1 - 1;FlFdcDeviceIo_~irpStack__Parameters__DeviceIoControl__Type3InputBuffer~0#1 := FlFdcDeviceIo_~Data#1; {67966#true} is VALID [2022-02-21 00:02:19,898 INFO L272 TraceCheckUtils]: 42: Hoare triple {67966#true} call FlFdcDeviceIo_#t~ret87#1 := IofCallDriver(FlFdcDeviceIo_~DeviceObject#1, FlFdcDeviceIo_~irp~0#1); {68003#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} is VALID [2022-02-21 00:02:19,898 INFO L290 TraceCheckUtils]: 43: Hoare triple {68003#(and (= ~setEventCalled~0 |old(~setEventCalled~0)|) (= ~lowerDriverReturn~0 |old(~lowerDriverReturn~0)|) (= ~s~0 |old(~s~0)|))} ~DeviceObject#1 := #in~DeviceObject#1;~Irp#1 := #in~Irp#1;havoc ~returnVal2~0#1;havoc ~compRetStatus1~0#1;assume -2147483648 <= #t~nondet100#1 && #t~nondet100#1 <= 2147483647;~lcontext~0#1 := #t~nondet100#1;havoc #t~nondet100#1;havoc ~__cil_tmp7~0#1; {67966#true} is VALID [2022-02-21 00:02:19,898 INFO L290 TraceCheckUtils]: 44: Hoare triple {67966#true} assume 0 != ~compRegistered~0;assume { :begin_inline_FloppyPnpComplete } true;FloppyPnpComplete_#in~DeviceObject#1, FloppyPnpComplete_#in~Irp#1, FloppyPnpComplete_#in~Context#1 := ~DeviceObject#1, ~Irp#1, ~lcontext~0#1;havoc FloppyPnpComplete_#res#1;havoc FloppyPnpComplete_#t~ret82#1, FloppyPnpComplete_~DeviceObject#1, FloppyPnpComplete_~Irp#1, FloppyPnpComplete_~Context#1;FloppyPnpComplete_~DeviceObject#1 := FloppyPnpComplete_#in~DeviceObject#1;FloppyPnpComplete_~Irp#1 := FloppyPnpComplete_#in~Irp#1;FloppyPnpComplete_~Context#1 := FloppyPnpComplete_#in~Context#1;assume { :begin_inline_KeSetEvent } true;KeSetEvent_#in~Event#1, KeSetEvent_#in~Increment#1, KeSetEvent_#in~Wait#1 := FloppyPnpComplete_~Context#1, 1, 0;havoc KeSetEvent_#res#1;havoc KeSetEvent_#t~nondet104#1, KeSetEvent_~Event#1, KeSetEvent_~Increment#1, KeSetEvent_~Wait#1, KeSetEvent_~l~0#1;KeSetEvent_~Event#1 := KeSetEvent_#in~Event#1;KeSetEvent_~Increment#1 := KeSetEvent_#in~Increment#1;KeSetEvent_~Wait#1 := KeSetEvent_#in~Wait#1;assume -2147483648 <= KeSetEvent_#t~nondet104#1 && KeSetEvent_#t~nondet104#1 <= 2147483647;KeSetEvent_~l~0#1 := KeSetEvent_#t~nondet104#1;havoc KeSetEvent_#t~nondet104#1;~setEventCalled~0 := 1;KeSetEvent_#res#1 := KeSetEvent_~l~0#1; {67966#true} is VALID [2022-02-21 00:02:19,898 INFO L290 TraceCheckUtils]: 45: Hoare triple {67966#true} FloppyPnpComplete_#t~ret82#1 := KeSetEvent_#res#1;assume { :end_inline_KeSetEvent } true;assume -2147483648 <= FloppyPnpComplete_#t~ret82#1 && FloppyPnpComplete_#t~ret82#1 <= 2147483647;havoc FloppyPnpComplete_#t~ret82#1;FloppyPnpComplete_#res#1 := -1073741802; {67966#true} is VALID [2022-02-21 00:02:19,899 INFO L290 TraceCheckUtils]: 46: Hoare triple {67966#true} #t~ret101#1 := FloppyPnpComplete_#res#1;assume { :end_inline_FloppyPnpComplete } true;assume -2147483648 <= #t~ret101#1 && #t~ret101#1 <= 2147483647;~compRetStatus1~0#1 := #t~ret101#1;havoc #t~ret101#1;~__cil_tmp7~0#1 := ~compRetStatus1~0#1; {67966#true} is VALID [2022-02-21 00:02:19,899 INFO L290 TraceCheckUtils]: 47: Hoare triple {67966#true} assume 3221225494 == ~__cil_tmp7~0#1 % 4294967296;assume { :begin_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,899 INFO L290 TraceCheckUtils]: 48: Hoare triple {67966#true} assume ~s~0 == ~NP~0;~s~0 := ~MPR1~0; {67966#true} is VALID [2022-02-21 00:02:19,899 INFO L290 TraceCheckUtils]: 49: Hoare triple {67966#true} assume { :end_inline_stubMoreProcessingRequired } true; {67966#true} is VALID [2022-02-21 00:02:19,899 INFO L290 TraceCheckUtils]: 50: Hoare triple {67966#true} havoc ~tmp_ndt_7~0#1;assume -2147483648 <= #t~nondet102#1 && #t~nondet102#1 <= 2147483647;~tmp_ndt_7~0#1 := #t~nondet102#1;havoc #t~nondet102#1; {67966#true} is VALID [2022-02-21 00:02:19,899 INFO L290 TraceCheckUtils]: 51: Hoare triple {67966#true} assume !(0 == ~tmp_ndt_7~0#1);havoc ~tmp_ndt_8~0#1;assume -2147483648 <= #t~nondet103#1 && #t~nondet103#1 <= 2147483647;~tmp_ndt_8~0#1 := #t~nondet103#1;havoc #t~nondet103#1; {67966#true} is VALID [2022-02-21 00:02:19,900 INFO L290 TraceCheckUtils]: 52: Hoare triple {67966#true} assume !(1 == ~tmp_ndt_8~0#1); {67966#true} is VALID [2022-02-21 00:02:19,900 INFO L290 TraceCheckUtils]: 53: Hoare triple {67966#true} ~returnVal2~0#1 := 259; {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,900 INFO L290 TraceCheckUtils]: 54: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume !(~s~0 == ~NP~0); {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,901 INFO L290 TraceCheckUtils]: 55: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume ~s~0 == ~MPR1~0; {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,901 INFO L290 TraceCheckUtils]: 56: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} assume 259 == ~returnVal2~0#1;~s~0 := ~MPR3~0;~lowerDriverReturn~0 := ~returnVal2~0#1; {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} is VALID [2022-02-21 00:02:19,902 INFO L290 TraceCheckUtils]: 57: Hoare triple {68004#(and (<= 259 |IofCallDriver_~returnVal2~0#1|) (<= |IofCallDriver_~returnVal2~0#1| 259))} #res#1 := ~returnVal2~0#1; {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:19,902 INFO L290 TraceCheckUtils]: 58: Hoare triple {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} assume true; {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} is VALID [2022-02-21 00:02:19,903 INFO L284 TraceCheckUtils]: 59: Hoare quadruple {68005#(and (<= 259 |IofCallDriver_#res#1|) (<= |IofCallDriver_#res#1| 259))} {67966#true} #757#return; {68001#(= 259 |ULTIMATE.start_FlFdcDeviceIo_#t~ret87#1|)} is VALID [2022-02-21 00:02:19,904 INFO L290 TraceCheckUtils]: 60: Hoare triple {68001#(= 259 |ULTIMATE.start_FlFdcDeviceIo_#t~ret87#1|)} assume -2147483648 <= FlFdcDeviceIo_#t~ret87#1 && FlFdcDeviceIo_#t~ret87#1 <= 2147483647;FlFdcDeviceIo_~ntStatus~2#1 := FlFdcDeviceIo_#t~ret87#1;havoc FlFdcDeviceIo_#t~ret87#1;FlFdcDeviceIo_~__cil_tmp11~0#1 := FlFdcDeviceIo_~ntStatus~2#1; {68002#(= |ULTIMATE.start_FlFdcDeviceIo_~__cil_tmp11~0#1| 259)} is VALID [2022-02-21 00:02:19,904 INFO L290 TraceCheckUtils]: 61: Hoare triple {68002#(= |ULTIMATE.start_FlFdcDeviceIo_~__cil_tmp11~0#1| 259)} assume !(259 == FlFdcDeviceIo_~__cil_tmp11~0#1); {67967#false} is VALID [2022-02-21 00:02:19,905 INFO L290 TraceCheckUtils]: 62: Hoare triple {67967#false} FlFdcDeviceIo_#res#1 := FlFdcDeviceIo_~ntStatus~2#1; {67967#false} is VALID [2022-02-21 00:02:19,905 INFO L290 TraceCheckUtils]: 63: Hoare triple {67967#false} FloppyStartDevice_#t~ret76#1 := FlFdcDeviceIo_#res#1;assume { :end_inline_FlFdcDeviceIo } true;assume -2147483648 <= FloppyStartDevice_#t~ret76#1 && FloppyStartDevice_#t~ret76#1 <= 2147483647;FloppyStartDevice_~ntStatus~1#1 := FloppyStartDevice_#t~ret76#1;havoc FloppyStartDevice_#t~ret76#1; {67967#false} is VALID [2022-02-21 00:02:19,905 INFO L290 TraceCheckUtils]: 64: Hoare triple {67967#false} assume !(FloppyStartDevice_~ntStatus~1#1 >= 0); {67967#false} is VALID [2022-02-21 00:02:19,905 INFO L290 TraceCheckUtils]: 65: Hoare triple {67967#false} FloppyStartDevice_~Irp__IoStatus__Status~2#1 := FloppyStartDevice_~ntStatus~1#1;~myStatus~0 := FloppyStartDevice_~ntStatus~1#1; {67967#false} is VALID [2022-02-21 00:02:19,905 INFO L272 TraceCheckUtils]: 66: Hoare triple {67967#false} call IofCompleteRequest(FloppyStartDevice_~Irp#1, 0); {67967#false} is VALID [2022-02-21 00:02:19,905 INFO L290 TraceCheckUtils]: 67: Hoare triple {67967#false} ~Irp := #in~Irp;~PriorityBoost := #in~PriorityBoost; {67967#false} is VALID [2022-02-21 00:02:19,906 INFO L290 TraceCheckUtils]: 68: Hoare triple {67967#false} assume !(~s~0 == ~NP~0); {67967#false} is VALID [2022-02-21 00:02:19,906 INFO L272 TraceCheckUtils]: 69: Hoare triple {67967#false} call errorFn(); {67967#false} is VALID [2022-02-21 00:02:19,906 INFO L290 TraceCheckUtils]: 70: Hoare triple {67967#false} assume !false; {67967#false} is VALID [2022-02-21 00:02:19,907 INFO L134 CoverageAnalysis]: Checked inductivity of 15 backedges. 6 proven. 0 refuted. 0 times theorem prover too weak. 9 trivial. 0 not checked. [2022-02-21 00:02:19,907 INFO L144 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-02-21 00:02:19,909 INFO L338 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [864291216] [2022-02-21 00:02:19,909 INFO L165 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [864291216] provided 1 perfect and 0 imperfect interpolant sequences [2022-02-21 00:02:19,910 INFO L191 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-02-21 00:02:19,910 INFO L204 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-02-21 00:02:19,910 INFO L118 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1847858003] [2022-02-21 00:02:19,910 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-02-21 00:02:19,911 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 8.142857142857142) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 71 [2022-02-21 00:02:19,911 INFO L84 Accepts]: Finished accepts. word is accepted. [2022-02-21 00:02:19,911 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with has 7 states, 7 states have (on average 8.142857142857142) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:19,951 INFO L122 InductivityCheck]: Floyd-Hoare automaton has 63 edges. 63 inductive. 0 not inductive. 0 times theorem prover too weak to decide inductivity. [2022-02-21 00:02:19,951 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 7 states [2022-02-21 00:02:19,951 INFO L108 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-02-21 00:02:19,952 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-02-21 00:02:19,952 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2022-02-21 00:02:19,952 INFO L87 Difference]: Start difference. First operand 354 states and 430 transitions. Second operand has 7 states, 7 states have (on average 8.142857142857142) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:20,614 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-02-21 00:02:20,615 INFO L93 Difference]: Finished difference Result 389 states and 473 transitions. [2022-02-21 00:02:20,615 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-02-21 00:02:20,615 INFO L78 Accepts]: Start accepts. Automaton has has 7 states, 7 states have (on average 8.142857142857142) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) Word has length 71 [2022-02-21 00:02:20,616 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-02-21 00:02:20,616 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 8.142857142857142) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:20,617 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 247 transitions. [2022-02-21 00:02:20,617 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 8.142857142857142) internal successors, (57), 5 states have internal predecessors, (57), 2 states have call successors, (4), 2 states have call predecessors, (4), 2 states have return successors, (2), 2 states have call predecessors, (2), 1 states have call successors, (2) [2022-02-21 00:02:20,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 7 states to 7 states and 247 transitions. [2022-02-21 00:02:20,619 INFO L86 InductivityCheck]: Starting indutivity check of a Floyd-Hoare automaton with 7 states and 247 transitions.