./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 11:34:07,840 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 11:34:07,843 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 11:34:07,892 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 11:34:07,893 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 11:34:07,894 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 11:34:07,897 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 11:34:07,900 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 11:34:07,902 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 11:34:07,906 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 11:34:07,907 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 11:34:07,909 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 11:34:07,909 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 11:34:07,911 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 11:34:07,912 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 11:34:07,917 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 11:34:07,918 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 11:34:07,920 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 11:34:07,921 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 11:34:07,926 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 11:34:07,928 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 11:34:07,930 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 11:34:07,931 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 11:34:07,932 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 11:34:07,934 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 11:34:07,940 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 11:34:07,941 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 11:34:07,941 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 11:34:07,942 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 11:34:07,942 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 11:34:07,943 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 11:34:07,943 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 11:34:07,945 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 11:34:07,946 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 11:34:07,947 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 11:34:07,947 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 11:34:07,948 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 11:34:07,948 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 11:34:07,948 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 11:34:07,949 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 11:34:07,949 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 11:34:07,951 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 11:34:07,959 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-21 11:34:07,990 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 11:34:07,991 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 11:34:07,991 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 11:34:07,991 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 11:34:07,992 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 11:34:07,992 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 11:34:07,993 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 11:34:07,993 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 11:34:07,994 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 11:34:07,995 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 11:34:07,995 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-21 11:34:07,995 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 11:34:07,995 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 11:34:07,995 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 11:34:07,996 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 11:34:07,996 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 11:34:07,996 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 11:34:07,996 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 11:34:07,997 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 11:34:07,997 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 11:34:07,997 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 11:34:07,997 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:34:07,998 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 11:34:07,998 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 11:34:07,998 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 11:34:07,998 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-21 11:34:07,998 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-21 11:34:07,999 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 11:34:07,999 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 11:34:07,999 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 11:34:07,999 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2022-07-21 11:34:08,350 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 11:34:08,374 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 11:34:08,377 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 11:34:08,378 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 11:34:08,380 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 11:34:08,381 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-21 11:34:08,443 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7fb08eab6/12891150ec5f4937bc76da1184fc650c/FLAGf6424622e [2022-07-21 11:34:09,154 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 11:34:09,155 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-21 11:34:09,190 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7fb08eab6/12891150ec5f4937bc76da1184fc650c/FLAGf6424622e [2022-07-21 11:34:09,289 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7fb08eab6/12891150ec5f4937bc76da1184fc650c [2022-07-21 11:34:09,291 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 11:34:09,292 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 11:34:09,295 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 11:34:09,295 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 11:34:09,299 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 11:34:09,300 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:34:09" (1/1) ... [2022-07-21 11:34:09,301 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4588dbe2 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:09, skipping insertion in model container [2022-07-21 11:34:09,301 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:34:09" (1/1) ... [2022-07-21 11:34:09,309 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 11:34:09,399 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 11:34:09,817 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-21 11:34:09,818 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-21 11:34:09,819 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-21 11:34:09,819 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-21 11:34:09,819 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-21 11:34:09,820 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-21 11:34:09,820 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-21 11:34:09,821 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-21 11:34:09,840 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-21 11:34:09,841 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-21 11:34:09,841 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-21 11:34:09,842 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-21 11:34:09,842 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-21 11:34:09,842 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-21 11:34:09,843 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-21 11:34:09,844 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-21 11:34:09,844 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-21 11:34:09,844 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-21 11:34:09,844 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-21 11:34:09,844 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-21 11:34:10,091 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-21 11:34:10,369 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:34:10,428 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 11:34:10,523 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-21 11:34:10,524 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-21 11:34:10,525 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-21 11:34:10,526 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-21 11:34:10,526 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-21 11:34:10,527 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-21 11:34:10,528 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-21 11:34:10,529 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-21 11:34:10,535 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-21 11:34:10,536 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-21 11:34:10,536 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-21 11:34:10,538 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-21 11:34:10,538 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-21 11:34:10,539 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-21 11:34:10,540 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-21 11:34:10,540 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-21 11:34:10,540 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-21 11:34:10,541 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-21 11:34:10,541 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-21 11:34:10,541 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-21 11:34:10,579 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-21 11:34:10,644 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:34:10,708 INFO L208 MainTranslator]: Completed translation [2022-07-21 11:34:10,708 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10 WrapperNode [2022-07-21 11:34:10,709 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 11:34:10,710 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 11:34:10,710 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 11:34:10,710 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 11:34:10,716 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:10,770 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:10,907 INFO L137 Inliner]: procedures = 98, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1886 [2022-07-21 11:34:10,908 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 11:34:10,909 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 11:34:10,909 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 11:34:10,909 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 11:34:10,916 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:10,917 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:10,942 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:10,944 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:10,995 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:11,019 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:11,027 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:11,048 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 11:34:11,049 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 11:34:11,055 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 11:34:11,055 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 11:34:11,056 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (1/1) ... [2022-07-21 11:34:11,062 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:34:11,072 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:34:11,089 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 11:34:11,150 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 11:34:11,182 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2022-07-21 11:34:11,182 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2022-07-21 11:34:11,182 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-21 11:34:11,182 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-21 11:34:11,183 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-21 11:34:11,183 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-07-21 11:34:11,183 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-07-21 11:34:11,183 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-07-21 11:34:11,183 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-07-21 11:34:11,184 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-21 11:34:11,184 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-21 11:34:11,184 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-21 11:34:11,184 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-21 11:34:11,184 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2022-07-21 11:34:11,185 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2022-07-21 11:34:11,185 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-21 11:34:11,185 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-21 11:34:11,186 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2022-07-21 11:34:11,186 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2022-07-21 11:34:11,187 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-21 11:34:11,187 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-21 11:34:11,187 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2022-07-21 11:34:11,187 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2022-07-21 11:34:11,187 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-21 11:34:11,187 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-21 11:34:11,187 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-21 11:34:11,188 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-07-21 11:34:11,188 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-07-21 11:34:11,188 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-21 11:34:11,188 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 11:34:11,188 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-21 11:34:11,188 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-21 11:34:11,189 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-21 11:34:11,189 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-21 11:34:11,189 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-21 11:34:11,189 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2022-07-21 11:34:11,190 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2022-07-21 11:34:11,190 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-21 11:34:11,190 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-21 11:34:11,190 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-21 11:34:11,190 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-21 11:34:11,190 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2022-07-21 11:34:11,190 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2022-07-21 11:34:11,191 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2022-07-21 11:34:11,191 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2022-07-21 11:34:11,191 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2022-07-21 11:34:11,191 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2022-07-21 11:34:11,191 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-21 11:34:11,191 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2022-07-21 11:34:11,192 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2022-07-21 11:34:11,192 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-21 11:34:11,192 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-21 11:34:11,202 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2022-07-21 11:34:11,202 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2022-07-21 11:34:11,202 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 11:34:11,203 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 11:34:11,533 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 11:34:11,536 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 11:34:11,738 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-21 11:34:11,800 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-07-21 11:34:13,012 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 11:34:13,028 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 11:34:13,028 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-21 11:34:13,031 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:34:13 BoogieIcfgContainer [2022-07-21 11:34:13,032 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 11:34:13,033 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 11:34:13,034 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 11:34:13,037 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 11:34:13,037 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 11:34:09" (1/3) ... [2022-07-21 11:34:13,038 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b50b6ef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:34:13, skipping insertion in model container [2022-07-21 11:34:13,039 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:10" (2/3) ... [2022-07-21 11:34:13,039 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@7b50b6ef and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:34:13, skipping insertion in model container [2022-07-21 11:34:13,039 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:34:13" (3/3) ... [2022-07-21 11:34:13,041 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-21 11:34:13,055 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 11:34:13,055 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 11:34:13,125 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 11:34:13,131 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@2ac230fe, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4aed5a1e [2022-07-21 11:34:13,132 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 11:34:13,137 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2022-07-21 11:34:13,148 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-21 11:34:13,149 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:13,150 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:13,150 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:13,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:13,155 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2022-07-21 11:34:13,162 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:34:13,162 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1537121824] [2022-07-21 11:34:13,163 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:13,164 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:34:13,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:13,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:34:13,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:13,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:34:13,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:13,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:34:13,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:13,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 11:34:13,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:13,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-21 11:34:13,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:13,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 11:34:13,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:13,895 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-21 11:34:13,896 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:34:13,896 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1537121824] [2022-07-21 11:34:13,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1537121824] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:34:13,897 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:34:13,898 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-21 11:34:13,899 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [119645518] [2022-07-21 11:34:13,900 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:34:13,904 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 11:34:13,904 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:34:13,932 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 11:34:13,934 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-07-21 11:34:13,938 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:34:14,725 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:34:14,726 INFO L93 Difference]: Finished difference Result 758 states and 1117 transitions. [2022-07-21 11:34:14,727 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-21 11:34:14,728 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2022-07-21 11:34:14,729 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:34:14,739 INFO L225 Difference]: With dead ends: 758 [2022-07-21 11:34:14,739 INFO L226 Difference]: Without dead ends: 351 [2022-07-21 11:34:14,744 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=129, Unknown=0, NotChecked=0, Total=182 [2022-07-21 11:34:14,749 INFO L413 NwaCegarLoop]: 473 mSDtfsCounter, 135 mSDsluCounter, 2046 mSDsCounter, 0 mSdLazyCounter, 550 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 2519 SdHoareTripleChecker+Invalid, 682 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 550 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2022-07-21 11:34:14,751 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 2519 Invalid, 682 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 550 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2022-07-21 11:34:14,768 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2022-07-21 11:34:14,833 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 342. [2022-07-21 11:34:14,836 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-21 11:34:14,838 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2022-07-21 11:34:14,840 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2022-07-21 11:34:14,840 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:34:14,841 INFO L495 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2022-07-21 11:34:14,841 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:34:14,841 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2022-07-21 11:34:14,849 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-21 11:34:14,849 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:14,849 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:14,850 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-21 11:34:14,850 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:14,850 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:14,851 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2022-07-21 11:34:14,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:34:14,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605434495] [2022-07-21 11:34:14,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:14,851 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:34:14,994 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:34:15,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,094 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:34:15,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:34:15,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 11:34:15,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,124 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:34:15,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 11:34:15,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-21 11:34:15,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,210 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-21 11:34:15,211 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:34:15,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605434495] [2022-07-21 11:34:15,211 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605434495] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 11:34:15,211 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1484977554] [2022-07-21 11:34:15,212 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:15,212 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:34:15,212 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:34:15,219 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 11:34:15,226 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-21 11:34:15,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:15,685 INFO L263 TraceCheckSpWp]: Trace formula consists of 2305 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-21 11:34:15,692 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:34:15,796 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-21 11:34:15,797 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:34:15,797 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1484977554] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:34:15,797 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-21 11:34:15,798 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2022-07-21 11:34:15,798 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2053474440] [2022-07-21 11:34:15,799 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:34:15,799 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-21 11:34:15,800 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:34:15,800 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-21 11:34:15,800 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-21 11:34:15,801 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 11:34:15,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:34:15,850 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2022-07-21 11:34:15,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-21 11:34:15,851 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-07-21 11:34:15,852 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:34:15,854 INFO L225 Difference]: With dead ends: 657 [2022-07-21 11:34:15,855 INFO L226 Difference]: Without dead ends: 343 [2022-07-21 11:34:15,856 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-07-21 11:34:15,861 INFO L413 NwaCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 11:34:15,862 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 11:34:15,865 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-07-21 11:34:15,884 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-07-21 11:34:15,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-21 11:34:15,889 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2022-07-21 11:34:15,889 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2022-07-21 11:34:15,889 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:34:15,890 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2022-07-21 11:34:15,890 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 11:34:15,890 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2022-07-21 11:34:15,892 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-21 11:34:15,893 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:15,896 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:15,925 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Ended with exit code 0 [2022-07-21 11:34:16,111 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:34:16,112 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:16,112 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:16,112 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2022-07-21 11:34:16,113 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:34:16,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [244942047] [2022-07-21 11:34:16,113 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:16,113 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:34:16,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:34:16,337 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,342 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-21 11:34:16,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-21 11:34:16,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-21 11:34:16,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-21 11:34:16,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-21 11:34:16,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-21 11:34:16,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,488 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-21 11:34:16,488 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-21 11:34:16,488 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [244942047] [2022-07-21 11:34:16,489 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [244942047] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-21 11:34:16,489 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1189220845] [2022-07-21 11:34:16,489 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:16,489 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-21 11:34:16,489 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:34:16,491 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-21 11:34:16,520 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-21 11:34:16,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:16,941 INFO L263 TraceCheckSpWp]: Trace formula consists of 2335 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-21 11:34:16,946 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:34:16,996 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-21 11:34:16,996 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 11:34:17,108 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-21 11:34:17,109 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1189220845] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 11:34:17,109 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-21 11:34:17,109 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 5, 5] total 13 [2022-07-21 11:34:17,109 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [769051964] [2022-07-21 11:34:17,110 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-21 11:34:17,110 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-07-21 11:34:17,110 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-21 11:34:17,111 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-07-21 11:34:17,111 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2022-07-21 11:34:17,112 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-21 11:34:18,058 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:34:18,058 INFO L93 Difference]: Finished difference Result 669 states and 960 transitions. [2022-07-21 11:34:18,059 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-21 11:34:18,059 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 63 [2022-07-21 11:34:18,059 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:34:18,061 INFO L225 Difference]: With dead ends: 669 [2022-07-21 11:34:18,062 INFO L226 Difference]: Without dead ends: 352 [2022-07-21 11:34:18,063 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 131 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=95, Invalid=285, Unknown=0, NotChecked=0, Total=380 [2022-07-21 11:34:18,064 INFO L413 NwaCegarLoop]: 462 mSDtfsCounter, 124 mSDsluCounter, 2460 mSDsCounter, 0 mSdLazyCounter, 663 mSolverCounterSat, 166 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 2922 SdHoareTripleChecker+Invalid, 829 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 166 IncrementalHoareTripleChecker+Valid, 663 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2022-07-21 11:34:18,064 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 2922 Invalid, 829 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [166 Valid, 663 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2022-07-21 11:34:18,065 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2022-07-21 11:34:18,076 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 346. [2022-07-21 11:34:18,077 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-21 11:34:18,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2022-07-21 11:34:18,079 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2022-07-21 11:34:18,080 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:34:18,080 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2022-07-21 11:34:18,080 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-21 11:34:18,080 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2022-07-21 11:34:18,082 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-21 11:34:18,082 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:18,082 INFO L195 NwaCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:18,111 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-21 11:34:18,307 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2022-07-21 11:34:18,308 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:18,308 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:18,309 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2022-07-21 11:34:18,309 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-21 11:34:18,309 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [46639487] [2022-07-21 11:34:18,309 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:18,309 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-21 11:34:18,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-21 11:34:18,555 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-21 11:34:18,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-21 11:34:18,757 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-21 11:34:18,758 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-21 11:34:18,759 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 11:34:18,760 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-21 11:34:18,763 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2022-07-21 11:34:18,766 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 11:34:18,787 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-21 11:34:18,789 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-21 11:34:18,866 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 11:34:18 BoogieIcfgContainer [2022-07-21 11:34:18,866 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 11:34:18,866 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 11:34:18,866 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 11:34:18,867 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 11:34:18,867 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:34:13" (3/4) ... [2022-07-21 11:34:18,870 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-21 11:34:18,870 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 11:34:18,870 INFO L158 Benchmark]: Toolchain (without parser) took 9578.00ms. Allocated memory was 54.5MB in the beginning and 260.0MB in the end (delta: 205.5MB). Free memory was 35.6MB in the beginning and 138.2MB in the end (delta: -102.7MB). Peak memory consumption was 103.8MB. Max. memory is 16.1GB. [2022-07-21 11:34:18,871 INFO L158 Benchmark]: CDTParser took 0.23ms. Allocated memory is still 54.5MB. Free memory is still 36.7MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 11:34:18,871 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1413.99ms. Allocated memory was 54.5MB in the beginning and 81.8MB in the end (delta: 27.3MB). Free memory was 35.3MB in the beginning and 40.7MB in the end (delta: -5.4MB). Peak memory consumption was 35.1MB. Max. memory is 16.1GB. [2022-07-21 11:34:18,871 INFO L158 Benchmark]: Boogie Procedure Inliner took 198.13ms. Allocated memory is still 81.8MB. Free memory was 40.7MB in the beginning and 39.4MB in the end (delta: 1.3MB). Peak memory consumption was 18.2MB. Max. memory is 16.1GB. [2022-07-21 11:34:18,872 INFO L158 Benchmark]: Boogie Preprocessor took 140.04ms. Allocated memory is still 81.8MB. Free memory was 39.4MB in the beginning and 28.4MB in the end (delta: 11.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. [2022-07-21 11:34:18,872 INFO L158 Benchmark]: RCFGBuilder took 1982.71ms. Allocated memory was 81.8MB in the beginning and 184.5MB in the end (delta: 102.8MB). Free memory was 28.4MB in the beginning and 109.9MB in the end (delta: -81.5MB). Peak memory consumption was 38.1MB. Max. memory is 16.1GB. [2022-07-21 11:34:18,872 INFO L158 Benchmark]: TraceAbstraction took 5832.53ms. Allocated memory was 184.5MB in the beginning and 260.0MB in the end (delta: 75.5MB). Free memory was 108.9MB in the beginning and 139.3MB in the end (delta: -30.4MB). Peak memory consumption was 45.1MB. Max. memory is 16.1GB. [2022-07-21 11:34:18,873 INFO L158 Benchmark]: Witness Printer took 3.44ms. Allocated memory is still 260.0MB. Free memory was 139.3MB in the beginning and 138.2MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-21 11:34:18,875 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.23ms. Allocated memory is still 54.5MB. Free memory is still 36.7MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1413.99ms. Allocated memory was 54.5MB in the beginning and 81.8MB in the end (delta: 27.3MB). Free memory was 35.3MB in the beginning and 40.7MB in the end (delta: -5.4MB). Peak memory consumption was 35.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 198.13ms. Allocated memory is still 81.8MB. Free memory was 40.7MB in the beginning and 39.4MB in the end (delta: 1.3MB). Peak memory consumption was 18.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 140.04ms. Allocated memory is still 81.8MB. Free memory was 39.4MB in the beginning and 28.4MB in the end (delta: 11.0MB). Peak memory consumption was 10.5MB. Max. memory is 16.1GB. * RCFGBuilder took 1982.71ms. Allocated memory was 81.8MB in the beginning and 184.5MB in the end (delta: 102.8MB). Free memory was 28.4MB in the beginning and 109.9MB in the end (delta: -81.5MB). Peak memory consumption was 38.1MB. Max. memory is 16.1GB. * TraceAbstraction took 5832.53ms. Allocated memory was 184.5MB in the beginning and 260.0MB in the end (delta: 75.5MB). Free memory was 108.9MB in the beginning and 139.3MB in the end (delta: -30.4MB). Peak memory consumption was 45.1MB. Max. memory is 16.1GB. * Witness Printer took 3.44ms. Allocated memory is still 260.0MB. Free memory was 139.3MB in the beginning and 138.2MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=1, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=1, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 5.7s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.9s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 269 SdHoareTripleChecker+Valid, 1.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 261 mSDsluCounter, 6836 SdHoareTripleChecker+Invalid, 1.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5435 mSDsCounter, 299 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1221 IncrementalHoareTripleChecker+Invalid, 1520 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 299 mSolverCounterUnsat, 1401 mSDtfsCounter, 1221 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 253 GetRequests, 214 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.5s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 26, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 15 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.2s SatisfiabilityAnalysisTime, 1.1s InterpolantComputationTime, 372 NumberOfCodeBlocks, 372 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 360 ConstructedInterpolants, 0 QuantifiedInterpolants, 716 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4640 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 6 InterpolantComputations, 2 PerfectInterpolantSequences, 93/111 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-21 11:34:18,915 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-21 11:34:20,771 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-21 11:34:20,773 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-21 11:34:20,818 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-21 11:34:20,819 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-21 11:34:20,821 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-21 11:34:20,825 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-21 11:34:20,828 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-21 11:34:20,830 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-21 11:34:20,834 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-21 11:34:20,835 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-21 11:34:20,837 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-21 11:34:20,837 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-21 11:34:20,839 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-21 11:34:20,841 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-21 11:34:20,846 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-21 11:34:20,847 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-21 11:34:20,848 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-21 11:34:20,850 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-21 11:34:20,855 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-21 11:34:20,856 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-21 11:34:20,858 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-21 11:34:20,859 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-21 11:34:20,860 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-21 11:34:20,861 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-21 11:34:20,868 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-21 11:34:20,868 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-21 11:34:20,869 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-21 11:34:20,870 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-21 11:34:20,870 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-21 11:34:20,871 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-21 11:34:20,871 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-21 11:34:20,873 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-21 11:34:20,873 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-21 11:34:20,875 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-21 11:34:20,876 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-21 11:34:20,876 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-21 11:34:20,877 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-21 11:34:20,877 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-21 11:34:20,877 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-21 11:34:20,878 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-21 11:34:20,879 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-21 11:34:20,885 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-07-21 11:34:20,920 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-21 11:34:20,921 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-21 11:34:20,921 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-21 11:34:20,922 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-21 11:34:20,922 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-21 11:34:20,923 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-21 11:34:20,923 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-21 11:34:20,924 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-21 11:34:20,924 INFO L138 SettingsManager]: * Use SBE=true [2022-07-21 11:34:20,925 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-21 11:34:20,925 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-21 11:34:20,925 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-21 11:34:20,925 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-21 11:34:20,926 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-21 11:34:20,926 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-07-21 11:34:20,926 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-07-21 11:34:20,926 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-07-21 11:34:20,926 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-21 11:34:20,927 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-21 11:34:20,927 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-21 11:34:20,927 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-21 11:34:20,927 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-21 11:34:20,928 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-21 11:34:20,928 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:34:20,928 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-21 11:34:20,928 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-21 11:34:20,928 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-21 11:34:20,929 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-07-21 11:34:20,929 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-07-21 11:34:20,929 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-21 11:34:20,929 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-21 11:34:20,930 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-21 11:34:20,930 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-07-21 11:34:20,930 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2022-07-21 11:34:21,261 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-21 11:34:21,278 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-21 11:34:21,280 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-21 11:34:21,281 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-21 11:34:21,283 INFO L275 PluginConnector]: CDTParser initialized [2022-07-21 11:34:21,285 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-21 11:34:21,336 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b2b6c9ee8/9c145a16f65945f8ad5d7ef4c0fe9b84/FLAG13be92874 [2022-07-21 11:34:22,018 INFO L306 CDTParser]: Found 1 translation units. [2022-07-21 11:34:22,018 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-21 11:34:22,054 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b2b6c9ee8/9c145a16f65945f8ad5d7ef4c0fe9b84/FLAG13be92874 [2022-07-21 11:34:22,188 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b2b6c9ee8/9c145a16f65945f8ad5d7ef4c0fe9b84 [2022-07-21 11:34:22,193 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-21 11:34:22,195 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-21 11:34:22,197 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-21 11:34:22,197 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-21 11:34:22,200 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-21 11:34:22,201 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:34:22" (1/1) ... [2022-07-21 11:34:22,202 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6cd8a719 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:22, skipping insertion in model container [2022-07-21 11:34:22,202 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 21.07 11:34:22" (1/1) ... [2022-07-21 11:34:22,209 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-21 11:34:22,294 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 11:34:22,665 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-21 11:34:22,665 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-21 11:34:22,666 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-21 11:34:22,666 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-21 11:34:22,666 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-21 11:34:22,666 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-21 11:34:22,667 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-21 11:34:22,667 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-21 11:34:22,673 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-21 11:34:22,673 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-21 11:34:22,674 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-21 11:34:22,675 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-21 11:34:22,675 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-21 11:34:22,675 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-21 11:34:22,679 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-21 11:34:22,680 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-21 11:34:22,680 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-21 11:34:22,680 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-21 11:34:22,680 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-21 11:34:22,681 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-21 11:34:22,827 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-21 11:34:23,025 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:34:23,076 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-07-21 11:34:23,118 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-21 11:34:23,183 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-21 11:34:23,184 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-21 11:34:23,184 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-21 11:34:23,186 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-21 11:34:23,186 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-21 11:34:23,187 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-21 11:34:23,188 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-21 11:34:23,188 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-21 11:34:23,194 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-21 11:34:23,195 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-21 11:34:23,195 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-21 11:34:23,195 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-21 11:34:23,196 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-21 11:34:23,196 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-21 11:34:23,197 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-21 11:34:23,197 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-21 11:34:23,197 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-21 11:34:23,197 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-21 11:34:23,198 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-21 11:34:23,198 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-21 11:34:23,217 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-21 11:34:23,287 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:34:23,314 INFO L203 MainTranslator]: Completed pre-run [2022-07-21 11:34:23,399 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-21 11:34:23,429 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-21 11:34:23,429 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-21 11:34:23,430 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-21 11:34:23,430 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-21 11:34:23,430 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-21 11:34:23,430 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-21 11:34:23,430 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-21 11:34:23,436 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-21 11:34:23,436 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-21 11:34:23,436 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-21 11:34:23,437 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-21 11:34:23,437 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-21 11:34:23,437 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-21 11:34:23,440 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-21 11:34:23,441 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-21 11:34:23,441 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-21 11:34:23,441 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-21 11:34:23,441 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-21 11:34:23,442 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-21 11:34:23,460 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-21 11:34:23,492 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-21 11:34:23,600 INFO L208 MainTranslator]: Completed translation [2022-07-21 11:34:23,600 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23 WrapperNode [2022-07-21 11:34:23,601 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-21 11:34:23,602 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-21 11:34:23,602 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-21 11:34:23,602 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-21 11:34:23,609 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,668 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,752 INFO L137 Inliner]: procedures = 107, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1826 [2022-07-21 11:34:23,752 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-21 11:34:23,753 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-21 11:34:23,753 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-21 11:34:23,753 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-21 11:34:23,760 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,761 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,780 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,780 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,848 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,866 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,900 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,918 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-21 11:34:23,926 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-21 11:34:23,926 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-21 11:34:23,926 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-21 11:34:23,928 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (1/1) ... [2022-07-21 11:34:23,934 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-21 11:34:23,942 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-21 11:34:23,957 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-21 11:34:23,971 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-21 11:34:23,996 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-07-21 11:34:23,997 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-07-21 11:34:23,997 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2022-07-21 11:34:23,997 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2022-07-21 11:34:23,997 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-21 11:34:23,997 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-21 11:34:23,997 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-07-21 11:34:23,998 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-07-21 11:34:23,998 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-07-21 11:34:23,998 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-07-21 11:34:23,999 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-21 11:34:23,999 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-21 11:34:23,999 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-21 11:34:23,999 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-21 11:34:23,999 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2022-07-21 11:34:23,999 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2022-07-21 11:34:23,999 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-21 11:34:24,000 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-21 11:34:24,000 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2022-07-21 11:34:24,000 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2022-07-21 11:34:24,000 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-21 11:34:24,000 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-21 11:34:24,000 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2022-07-21 11:34:24,001 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2022-07-21 11:34:24,001 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-21 11:34:24,001 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-21 11:34:24,001 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-21 11:34:24,001 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-07-21 11:34:24,002 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-07-21 11:34:24,002 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-21 11:34:24,002 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-21 11:34:24,002 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-21 11:34:24,003 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-21 11:34:24,003 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-21 11:34:24,003 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-21 11:34:24,003 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-21 11:34:24,003 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2022-07-21 11:34:24,003 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2022-07-21 11:34:24,004 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-21 11:34:24,004 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-21 11:34:24,004 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-21 11:34:24,004 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-21 11:34:24,004 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-07-21 11:34:24,004 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-07-21 11:34:24,004 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-07-21 11:34:24,005 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-07-21 11:34:24,005 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2022-07-21 11:34:24,005 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2022-07-21 11:34:24,005 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2022-07-21 11:34:24,005 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2022-07-21 11:34:24,006 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2022-07-21 11:34:24,006 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2022-07-21 11:34:24,009 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2022-07-21 11:34:24,009 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2022-07-21 11:34:24,009 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-21 11:34:24,009 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-21 11:34:24,010 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2022-07-21 11:34:24,010 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2022-07-21 11:34:24,011 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-21 11:34:24,011 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-21 11:34:24,393 INFO L234 CfgBuilder]: Building ICFG [2022-07-21 11:34:24,398 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-21 11:34:24,566 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-21 11:34:24,621 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-07-21 11:34:26,224 INFO L275 CfgBuilder]: Performing block encoding [2022-07-21 11:34:26,234 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-21 11:34:26,235 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-21 11:34:26,237 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:34:26 BoogieIcfgContainer [2022-07-21 11:34:26,237 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-21 11:34:26,239 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-21 11:34:26,239 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-21 11:34:26,241 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-21 11:34:26,241 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 21.07 11:34:22" (1/3) ... [2022-07-21 11:34:26,242 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f1017bc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:34:26, skipping insertion in model container [2022-07-21 11:34:26,242 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 21.07 11:34:23" (2/3) ... [2022-07-21 11:34:26,242 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@2f1017bc and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 21.07 11:34:26, skipping insertion in model container [2022-07-21 11:34:26,242 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:34:26" (3/3) ... [2022-07-21 11:34:26,243 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-21 11:34:26,255 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-21 11:34:26,256 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-21 11:34:26,313 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-21 11:34:26,319 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@7078f8ed, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@25903714 [2022-07-21 11:34:26,320 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-21 11:34:26,329 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2022-07-21 11:34:26,345 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-21 11:34:26,345 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:26,346 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:26,347 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:26,352 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:26,352 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2022-07-21 11:34:26,369 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:34:26,370 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [224356639] [2022-07-21 11:34:26,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:26,371 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:34:26,371 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:34:26,374 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:34:26,375 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-07-21 11:34:27,443 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:27,497 INFO L263 TraceCheckSpWp]: Trace formula consists of 1929 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-21 11:34:27,504 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:34:27,618 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-21 11:34:27,619 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:34:27,619 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:34:27,620 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [224356639] [2022-07-21 11:34:27,620 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [224356639] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:34:27,620 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:34:27,621 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-21 11:34:27,622 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [21099331] [2022-07-21 11:34:27,623 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:34:27,627 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-21 11:34:27,627 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:34:27,652 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-21 11:34:27,653 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:34:27,656 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:34:27,973 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:34:27,980 INFO L93 Difference]: Finished difference Result 751 states and 1103 transitions. [2022-07-21 11:34:27,982 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-21 11:34:27,984 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2022-07-21 11:34:27,984 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:34:27,996 INFO L225 Difference]: With dead ends: 751 [2022-07-21 11:34:27,997 INFO L226 Difference]: Without dead ends: 344 [2022-07-21 11:34:28,003 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-21 11:34:28,006 INFO L413 NwaCegarLoop]: 480 mSDtfsCounter, 34 mSDsluCounter, 1419 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 1899 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-21 11:34:28,008 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 1899 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-21 11:34:28,025 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 344 states. [2022-07-21 11:34:28,068 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 344 to 342. [2022-07-21 11:34:28,070 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-21 11:34:28,074 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2022-07-21 11:34:28,075 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2022-07-21 11:34:28,076 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:34:28,076 INFO L495 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2022-07-21 11:34:28,077 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-21 11:34:28,077 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2022-07-21 11:34:28,080 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-21 11:34:28,081 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:28,081 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:28,119 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-07-21 11:34:28,296 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:34:28,296 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:28,297 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:28,297 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2022-07-21 11:34:28,301 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:34:28,301 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [951874103] [2022-07-21 11:34:28,301 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:28,302 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:34:28,302 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:34:28,303 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:34:28,305 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-07-21 11:34:29,250 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:29,300 INFO L263 TraceCheckSpWp]: Trace formula consists of 1946 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-21 11:34:29,303 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:34:29,348 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-21 11:34:29,348 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-21 11:34:29,349 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:34:29,349 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [951874103] [2022-07-21 11:34:29,349 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [951874103] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-21 11:34:29,349 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-21 11:34:29,349 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-21 11:34:29,350 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [476714311] [2022-07-21 11:34:29,350 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-21 11:34:29,351 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-21 11:34:29,354 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:34:29,355 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-21 11:34:29,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-21 11:34:29,356 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 11:34:29,451 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:34:29,452 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2022-07-21 11:34:29,453 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-21 11:34:29,453 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-07-21 11:34:29,454 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:34:29,457 INFO L225 Difference]: With dead ends: 657 [2022-07-21 11:34:29,458 INFO L226 Difference]: Without dead ends: 343 [2022-07-21 11:34:29,460 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-21 11:34:29,465 INFO L413 NwaCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-21 11:34:29,466 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-21 11:34:29,469 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-07-21 11:34:29,506 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-07-21 11:34:29,507 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-21 11:34:29,511 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2022-07-21 11:34:29,515 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2022-07-21 11:34:29,515 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:34:29,516 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2022-07-21 11:34:29,516 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-21 11:34:29,516 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2022-07-21 11:34:29,524 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-21 11:34:29,524 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:29,525 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:29,575 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-07-21 11:34:29,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:34:29,744 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:29,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:29,745 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2022-07-21 11:34:29,747 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:34:29,747 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [882459980] [2022-07-21 11:34:29,747 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-21 11:34:29,748 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:34:29,748 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:34:29,749 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:34:29,751 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-07-21 11:34:30,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-21 11:34:30,732 INFO L263 TraceCheckSpWp]: Trace formula consists of 1968 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-21 11:34:30,735 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-21 11:34:30,771 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-21 11:34:30,772 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-21 11:34:30,896 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-21 11:34:30,897 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-21 11:34:30,897 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [882459980] [2022-07-21 11:34:30,897 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [882459980] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-21 11:34:30,897 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-07-21 11:34:30,897 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2022-07-21 11:34:30,898 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [203174247] [2022-07-21 11:34:30,898 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-07-21 11:34:30,898 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-21 11:34:30,898 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-21 11:34:30,899 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-21 11:34:30,899 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-21 11:34:30,899 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-21 11:34:31,039 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-21 11:34:31,039 INFO L93 Difference]: Finished difference Result 663 states and 949 transitions. [2022-07-21 11:34:31,040 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-21 11:34:31,040 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 63 [2022-07-21 11:34:31,041 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-21 11:34:31,043 INFO L225 Difference]: With dead ends: 663 [2022-07-21 11:34:31,043 INFO L226 Difference]: Without dead ends: 346 [2022-07-21 11:34:31,044 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-07-21 11:34:31,045 INFO L413 NwaCegarLoop]: 466 mSDtfsCounter, 7 mSDsluCounter, 2784 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 3250 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-21 11:34:31,045 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 3250 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-21 11:34:31,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2022-07-21 11:34:31,060 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 346. [2022-07-21 11:34:31,061 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-21 11:34:31,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2022-07-21 11:34:31,063 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2022-07-21 11:34:31,063 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-21 11:34:31,063 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2022-07-21 11:34:31,064 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-21 11:34:31,064 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2022-07-21 11:34:31,065 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-21 11:34:31,065 INFO L187 NwaCegarLoop]: Found error trace [2022-07-21 11:34:31,065 INFO L195 NwaCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-21 11:34:31,111 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-07-21 11:34:31,287 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:34:31,288 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-21 11:34:31,288 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-21 11:34:31,288 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2022-07-21 11:34:31,290 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-21 11:34:31,291 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [86003850] [2022-07-21 11:34:31,291 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-21 11:34:31,291 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-21 11:34:31,291 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-21 11:34:31,292 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-21 11:34:31,294 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-07-21 11:34:36,724 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-07-21 11:34:36,724 INFO L229 tOrderPrioritization]: Conjunction of SSA is sat [2022-07-21 11:34:36,724 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-21 11:34:42,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-21 11:34:43,363 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-07-21 11:34:43,363 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-21 11:34:43,364 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-21 11:34:43,438 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-07-21 11:34:43,587 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-21 11:34:43,590 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2022-07-21 11:34:43,594 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-21 11:34:43,643 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-21 11:34:43,644 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-21 11:34:43,749 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 21.07 11:34:43 BoogieIcfgContainer [2022-07-21 11:34:43,749 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-21 11:34:43,750 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-21 11:34:43,750 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-21 11:34:43,750 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-21 11:34:43,751 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 21.07 11:34:26" (3/4) ... [2022-07-21 11:34:43,753 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-21 11:34:43,753 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-21 11:34:43,754 INFO L158 Benchmark]: Toolchain (without parser) took 21559.30ms. Allocated memory was 62.9MB in the beginning and 369.1MB in the end (delta: 306.2MB). Free memory was 41.3MB in the beginning and 294.6MB in the end (delta: -253.3MB). Peak memory consumption was 52.1MB. Max. memory is 16.1GB. [2022-07-21 11:34:43,754 INFO L158 Benchmark]: CDTParser took 1.15ms. Allocated memory is still 48.2MB. Free memory was 30.4MB in the beginning and 30.4MB in the end (delta: 37.3kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 11:34:43,754 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1404.20ms. Allocated memory was 62.9MB in the beginning and 121.6MB in the end (delta: 58.7MB). Free memory was 41.2MB in the beginning and 73.9MB in the end (delta: -32.7MB). Peak memory consumption was 52.1MB. Max. memory is 16.1GB. [2022-07-21 11:34:43,755 INFO L158 Benchmark]: Boogie Procedure Inliner took 150.67ms. Allocated memory is still 121.6MB. Free memory was 73.9MB in the beginning and 62.0MB in the end (delta: 11.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-21 11:34:43,755 INFO L158 Benchmark]: Boogie Preprocessor took 171.50ms. Allocated memory is still 121.6MB. Free memory was 62.0MB in the beginning and 70.9MB in the end (delta: -8.9MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. [2022-07-21 11:34:43,755 INFO L158 Benchmark]: RCFGBuilder took 2311.42ms. Allocated memory was 121.6MB in the beginning and 243.3MB in the end (delta: 121.6MB). Free memory was 70.6MB in the beginning and 117.5MB in the end (delta: -47.0MB). Peak memory consumption was 94.9MB. Max. memory is 16.1GB. [2022-07-21 11:34:43,756 INFO L158 Benchmark]: TraceAbstraction took 17510.57ms. Allocated memory was 243.3MB in the beginning and 369.1MB in the end (delta: 125.8MB). Free memory was 117.5MB in the beginning and 295.7MB in the end (delta: -178.2MB). Peak memory consumption was 145.9MB. Max. memory is 16.1GB. [2022-07-21 11:34:43,756 INFO L158 Benchmark]: Witness Printer took 3.59ms. Allocated memory is still 369.1MB. Free memory is still 294.6MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-21 11:34:43,758 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 1.15ms. Allocated memory is still 48.2MB. Free memory was 30.4MB in the beginning and 30.4MB in the end (delta: 37.3kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1404.20ms. Allocated memory was 62.9MB in the beginning and 121.6MB in the end (delta: 58.7MB). Free memory was 41.2MB in the beginning and 73.9MB in the end (delta: -32.7MB). Peak memory consumption was 52.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 150.67ms. Allocated memory is still 121.6MB. Free memory was 73.9MB in the beginning and 62.0MB in the end (delta: 11.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 171.50ms. Allocated memory is still 121.6MB. Free memory was 62.0MB in the beginning and 70.9MB in the end (delta: -8.9MB). Peak memory consumption was 19.3MB. Max. memory is 16.1GB. * RCFGBuilder took 2311.42ms. Allocated memory was 121.6MB in the beginning and 243.3MB in the end (delta: 121.6MB). Free memory was 70.6MB in the beginning and 117.5MB in the end (delta: -47.0MB). Peak memory consumption was 94.9MB. Max. memory is 16.1GB. * TraceAbstraction took 17510.57ms. Allocated memory was 243.3MB in the beginning and 369.1MB in the end (delta: 125.8MB). Free memory was 117.5MB in the beginning and 295.7MB in the end (delta: -178.2MB). Peak memory consumption was 145.9MB. Max. memory is 16.1GB. * Witness Printer took 3.59ms. Allocated memory is still 369.1MB. Free memory is still 294.6MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={58:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=2147483648, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={37:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={58:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=2147483648, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 17.3s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 44 SdHoareTripleChecker+Valid, 0.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 43 mSDsluCounter, 6544 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5132 mSDsCounter, 8 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 48 IncrementalHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 8 mSolverCounterUnsat, 1412 mSDtfsCounter, 48 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 243 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 2 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 7.4s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 248 NumberOfCodeBlocks, 248 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 238 ConstructedInterpolants, 0 QuantifiedInterpolants, 302 SizeOfPredicates, 4 NumberOfNonLiveVariables, 5843 ConjunctsInSsa, 14 ConjunctsInUnsatCore, 4 InterpolantComputations, 2 PerfectInterpolantSequences, 66/74 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-21 11:34:43,819 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample