./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 13:00:55,445 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 13:00:55,447 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 13:00:55,482 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 13:00:55,482 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 13:00:55,484 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 13:00:55,485 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 13:00:55,487 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 13:00:55,488 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 13:00:55,491 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 13:00:55,492 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 13:00:55,494 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 13:00:55,494 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 13:00:55,495 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 13:00:55,496 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 13:00:55,498 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 13:00:55,499 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 13:00:55,499 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 13:00:55,500 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 13:00:55,501 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 13:00:55,502 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 13:00:55,502 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 13:00:55,503 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 13:00:55,504 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 13:00:55,505 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 13:00:55,511 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 13:00:55,511 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 13:00:55,511 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 13:00:55,512 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 13:00:55,512 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 13:00:55,513 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 13:00:55,513 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 13:00:55,514 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 13:00:55,515 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 13:00:55,515 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 13:00:55,516 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 13:00:55,516 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 13:00:55,516 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 13:00:55,516 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 13:00:55,517 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 13:00:55,518 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 13:00:55,519 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 13:00:55,520 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-12 13:00:55,541 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 13:00:55,541 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 13:00:55,541 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 13:00:55,542 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 13:00:55,542 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 13:00:55,542 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 13:00:55,543 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 13:00:55,543 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 13:00:55,543 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 13:00:55,544 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 13:00:55,544 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 13:00:55,544 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 13:00:55,544 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 13:00:55,544 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 13:00:55,544 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 13:00:55,545 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 13:00:55,545 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 13:00:55,545 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 13:00:55,546 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 13:00:55,546 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 13:00:55,546 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 13:00:55,546 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 13:00:55,546 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 13:00:55,546 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 13:00:55,547 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 13:00:55,547 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 13:00:55,547 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 13:00:55,547 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 13:00:55,547 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 13:00:55,547 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 13:00:55,548 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2022-07-12 13:00:55,736 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 13:00:55,751 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 13:00:55,752 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 13:00:55,753 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 13:00:55,754 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 13:00:55,754 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-12 13:00:55,801 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7b8799e6a/d63a06a8eada4128ba9358753dff255d/FLAGdff05edcb [2022-07-12 13:00:56,381 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 13:00:56,381 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-12 13:00:56,409 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7b8799e6a/d63a06a8eada4128ba9358753dff255d/FLAGdff05edcb [2022-07-12 13:00:56,831 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/7b8799e6a/d63a06a8eada4128ba9358753dff255d [2022-07-12 13:00:56,833 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 13:00:56,834 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 13:00:56,835 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 13:00:56,836 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 13:00:56,837 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 13:00:56,838 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 01:00:56" (1/1) ... [2022-07-12 13:00:56,838 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@74a5fc2d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:56, skipping insertion in model container [2022-07-12 13:00:56,839 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 01:00:56" (1/1) ... [2022-07-12 13:00:56,843 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 13:00:56,890 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 13:00:57,153 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-12 13:00:57,154 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-12 13:00:57,154 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-12 13:00:57,154 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-12 13:00:57,154 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-12 13:00:57,155 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-12 13:00:57,155 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-12 13:00:57,155 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-12 13:00:57,160 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-12 13:00:57,160 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-12 13:00:57,160 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-12 13:00:57,161 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-12 13:00:57,161 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-12 13:00:57,161 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-12 13:00:57,162 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-12 13:00:57,162 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-12 13:00:57,162 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-12 13:00:57,163 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-12 13:00:57,163 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-12 13:00:57,163 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-12 13:00:57,303 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-12 13:00:57,412 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 13:00:57,465 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 13:00:57,545 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-12 13:00:57,545 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-12 13:00:57,546 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-12 13:00:57,546 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-12 13:00:57,547 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-12 13:00:57,547 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-12 13:00:57,548 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-12 13:00:57,548 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-12 13:00:57,553 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-12 13:00:57,553 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-12 13:00:57,553 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-12 13:00:57,554 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-12 13:00:57,554 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-12 13:00:57,554 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-12 13:00:57,555 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-12 13:00:57,555 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-12 13:00:57,555 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-12 13:00:57,555 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-12 13:00:57,555 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-12 13:00:57,556 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-12 13:00:57,585 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-12 13:00:57,635 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 13:00:57,675 INFO L208 MainTranslator]: Completed translation [2022-07-12 13:00:57,675 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57 WrapperNode [2022-07-12 13:00:57,675 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 13:00:57,676 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 13:00:57,676 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 13:00:57,676 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 13:00:57,681 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,719 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,781 INFO L137 Inliner]: procedures = 98, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1886 [2022-07-12 13:00:57,782 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 13:00:57,783 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 13:00:57,783 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 13:00:57,783 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 13:00:57,789 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,789 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,835 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,836 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,869 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,882 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,890 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,904 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 13:00:57,907 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 13:00:57,907 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 13:00:57,907 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 13:00:57,908 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (1/1) ... [2022-07-12 13:00:57,912 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 13:00:57,925 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 13:00:57,934 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 13:00:57,940 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 13:00:57,967 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2022-07-12 13:00:57,967 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2022-07-12 13:00:57,967 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-12 13:00:57,967 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-12 13:00:57,967 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-12 13:00:57,967 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-07-12 13:00:57,968 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-07-12 13:00:57,968 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-07-12 13:00:57,968 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-07-12 13:00:57,968 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-12 13:00:57,968 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-12 13:00:57,968 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-12 13:00:57,968 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-12 13:00:57,969 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2022-07-12 13:00:57,969 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2022-07-12 13:00:57,979 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-12 13:00:57,979 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-12 13:00:57,979 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2022-07-12 13:00:57,979 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2022-07-12 13:00:57,979 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-12 13:00:57,979 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-12 13:00:57,979 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2022-07-12 13:00:57,979 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2022-07-12 13:00:57,980 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-12 13:00:57,980 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-12 13:00:57,980 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-12 13:00:57,980 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-07-12 13:00:57,980 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-07-12 13:00:57,980 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-12 13:00:57,980 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 13:00:57,980 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-12 13:00:57,980 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-12 13:00:57,981 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-12 13:00:57,981 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-12 13:00:57,981 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-12 13:00:57,981 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2022-07-12 13:00:57,981 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2022-07-12 13:00:57,981 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-12 13:00:57,981 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-12 13:00:57,981 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-12 13:00:57,981 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-12 13:00:57,982 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2022-07-12 13:00:57,982 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2022-07-12 13:00:57,982 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2022-07-12 13:00:57,982 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2022-07-12 13:00:57,982 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2022-07-12 13:00:57,982 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2022-07-12 13:00:57,982 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 13:00:57,982 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2022-07-12 13:00:57,982 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2022-07-12 13:00:57,983 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-12 13:00:57,983 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-12 13:00:57,983 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2022-07-12 13:00:57,983 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2022-07-12 13:00:57,983 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 13:00:57,983 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 13:00:58,261 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 13:00:58,262 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 13:00:58,354 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-12 13:00:58,383 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-07-12 13:00:59,218 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 13:00:59,232 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 13:00:59,232 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-12 13:00:59,234 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 01:00:59 BoogieIcfgContainer [2022-07-12 13:00:59,235 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 13:00:59,236 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 13:00:59,236 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 13:00:59,238 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 13:00:59,238 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 01:00:56" (1/3) ... [2022-07-12 13:00:59,239 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@423b9510 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 01:00:59, skipping insertion in model container [2022-07-12 13:00:59,239 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:00:57" (2/3) ... [2022-07-12 13:00:59,240 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@423b9510 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 01:00:59, skipping insertion in model container [2022-07-12 13:00:59,240 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 01:00:59" (3/3) ... [2022-07-12 13:00:59,241 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-12 13:00:59,251 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 13:00:59,251 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 13:00:59,294 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 13:00:59,298 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@32d5ee17, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4ad65a7 [2022-07-12 13:00:59,298 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 13:00:59,302 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2022-07-12 13:00:59,310 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-12 13:00:59,310 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:00:59,311 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:00:59,311 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:00:59,314 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:00:59,314 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2022-07-12 13:00:59,319 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 13:00:59,320 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [795270108] [2022-07-12 13:00:59,320 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:00:59,321 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 13:00:59,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:00:59,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 13:00:59,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:00:59,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 13:00:59,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:00:59,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 13:00:59,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:00:59,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 13:00:59,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:00:59,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 28 [2022-07-12 13:00:59,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:00:59,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-12 13:00:59,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:00:59,885 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-12 13:00:59,885 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 13:00:59,885 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [795270108] [2022-07-12 13:00:59,886 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [795270108] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 13:00:59,886 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 13:00:59,887 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-12 13:00:59,888 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617140266] [2022-07-12 13:00:59,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 13:00:59,891 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-12 13:00:59,892 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 13:00:59,915 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-12 13:00:59,917 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2022-07-12 13:00:59,919 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 13:01:00,598 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 13:01:00,598 INFO L93 Difference]: Finished difference Result 758 states and 1117 transitions. [2022-07-12 13:01:00,599 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-12 13:01:00,600 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2022-07-12 13:01:00,601 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 13:01:00,616 INFO L225 Difference]: With dead ends: 758 [2022-07-12 13:01:00,616 INFO L226 Difference]: Without dead ends: 351 [2022-07-12 13:01:00,633 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 25 GetRequests, 13 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 17 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=53, Invalid=129, Unknown=0, NotChecked=0, Total=182 [2022-07-12 13:01:00,640 INFO L413 NwaCegarLoop]: 473 mSDtfsCounter, 135 mSDsluCounter, 2046 mSDsCounter, 0 mSdLazyCounter, 550 mSolverCounterSat, 132 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 142 SdHoareTripleChecker+Valid, 2519 SdHoareTripleChecker+Invalid, 682 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 132 IncrementalHoareTripleChecker+Valid, 550 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-12 13:01:00,641 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [142 Valid, 2519 Invalid, 682 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [132 Valid, 550 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-12 13:01:00,653 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 351 states. [2022-07-12 13:01:00,703 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 351 to 342. [2022-07-12 13:01:00,705 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-12 13:01:00,706 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2022-07-12 13:01:00,707 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2022-07-12 13:01:00,707 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 13:01:00,707 INFO L495 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2022-07-12 13:01:00,708 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 4.125) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 4 states have call predecessors, (7), 2 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 13:01:00,708 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2022-07-12 13:01:00,714 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-12 13:01:00,714 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:01:00,714 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:01:00,715 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 13:01:00,715 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:01:00,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:01:00,715 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2022-07-12 13:01:00,716 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 13:01:00,716 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1758698541] [2022-07-12 13:01:00,716 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:00,716 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 13:01:00,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 13:01:00,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 13:01:00,870 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 13:01:00,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 13:01:00,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 13:01:00,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-12 13:01:00,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,951 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 40 [2022-07-12 13:01:00,956 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:00,959 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 3 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-12 13:01:00,960 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 13:01:00,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1758698541] [2022-07-12 13:01:00,960 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1758698541] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 13:01:00,960 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [817506357] [2022-07-12 13:01:00,960 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:00,960 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 13:01:00,960 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 13:01:00,964 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 13:01:00,965 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2022-07-12 13:01:01,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,354 INFO L263 TraceCheckSpWp]: Trace formula consists of 2305 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-12 13:01:01,359 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 13:01:01,449 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-12 13:01:01,452 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 13:01:01,452 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [817506357] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 13:01:01,452 INFO L184 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2022-07-12 13:01:01,452 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [7] total 8 [2022-07-12 13:01:01,453 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [349812703] [2022-07-12 13:01:01,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 13:01:01,453 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 13:01:01,453 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 13:01:01,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 13:01:01,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2022-07-12 13:01:01,454 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-12 13:01:01,490 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 13:01:01,491 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2022-07-12 13:01:01,491 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-12 13:01:01,491 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-07-12 13:01:01,491 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 13:01:01,493 INFO L225 Difference]: With dead ends: 657 [2022-07-12 13:01:01,493 INFO L226 Difference]: Without dead ends: 343 [2022-07-12 13:01:01,494 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 78 GetRequests, 70 SyntacticMatches, 1 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 5 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=20, Invalid=52, Unknown=0, NotChecked=0, Total=72 [2022-07-12 13:01:01,498 INFO L413 NwaCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 13:01:01,498 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 13:01:01,502 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-07-12 13:01:01,525 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-07-12 13:01:01,526 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-12 13:01:01,529 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2022-07-12 13:01:01,529 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2022-07-12 13:01:01,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 13:01:01,529 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2022-07-12 13:01:01,529 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-12 13:01:01,529 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2022-07-12 13:01:01,531 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-12 13:01:01,532 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:01:01,533 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:01:01,556 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2022-07-12 13:01:01,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1,2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 13:01:01,744 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:01:01,744 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:01:01,744 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2022-07-12 13:01:01,744 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 13:01:01,745 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1988008230] [2022-07-12 13:01:01,745 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:01,745 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 13:01:01,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 13:01:01,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 8 [2022-07-12 13:01:01,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 14 [2022-07-12 13:01:01,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 20 [2022-07-12 13:01:01,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 13:01:01,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2022-07-12 13:01:01,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:01,992 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2022-07-12 13:01:01,997 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:02,005 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-12 13:01:02,005 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 13:01:02,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1988008230] [2022-07-12 13:01:02,005 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1988008230] provided 0 perfect and 1 imperfect interpolant sequences [2022-07-12 13:01:02,006 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1503733771] [2022-07-12 13:01:02,006 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:02,006 INFO L173 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2022-07-12 13:01:02,006 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 13:01:02,008 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2022-07-12 13:01:02,009 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2022-07-12 13:01:02,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:02,374 INFO L263 TraceCheckSpWp]: Trace formula consists of 2335 conjuncts, 10 conjunts are in the unsatisfiable core [2022-07-12 13:01:02,377 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 13:01:02,416 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-12 13:01:02,416 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 13:01:02,508 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-12 13:01:02,508 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1503733771] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 13:01:02,508 INFO L184 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2022-07-12 13:01:02,508 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 5, 5] total 13 [2022-07-12 13:01:02,508 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [136892296] [2022-07-12 13:01:02,509 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2022-07-12 13:01:02,509 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2022-07-12 13:01:02,509 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 13:01:02,510 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2022-07-12 13:01:02,510 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=118, Unknown=0, NotChecked=0, Total=156 [2022-07-12 13:01:02,510 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-12 13:01:03,166 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 13:01:03,166 INFO L93 Difference]: Finished difference Result 669 states and 960 transitions. [2022-07-12 13:01:03,167 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 11 states. [2022-07-12 13:01:03,167 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) Word has length 63 [2022-07-12 13:01:03,167 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 13:01:03,170 INFO L225 Difference]: With dead ends: 669 [2022-07-12 13:01:03,171 INFO L226 Difference]: Without dead ends: 352 [2022-07-12 13:01:03,171 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 150 GetRequests, 131 SyntacticMatches, 1 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 29 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=95, Invalid=285, Unknown=0, NotChecked=0, Total=380 [2022-07-12 13:01:03,175 INFO L413 NwaCegarLoop]: 462 mSDtfsCounter, 124 mSDsluCounter, 2460 mSDsCounter, 0 mSdLazyCounter, 663 mSolverCounterSat, 166 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 125 SdHoareTripleChecker+Valid, 2922 SdHoareTripleChecker+Invalid, 829 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 166 IncrementalHoareTripleChecker+Valid, 663 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2022-07-12 13:01:03,178 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [125 Valid, 2922 Invalid, 829 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [166 Valid, 663 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2022-07-12 13:01:03,179 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 352 states. [2022-07-12 13:01:03,191 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 352 to 346. [2022-07-12 13:01:03,192 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-12 13:01:03,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2022-07-12 13:01:03,193 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2022-07-12 13:01:03,194 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 13:01:03,195 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2022-07-12 13:01:03,195 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 4.384615384615385) internal successors, (57), 10 states have internal predecessors, (57), 2 states have call successors, (15), 5 states have call predecessors, (15), 5 states have return successors, (10), 2 states have call predecessors, (10), 2 states have call successors, (10) [2022-07-12 13:01:03,195 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2022-07-12 13:01:03,196 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-12 13:01:03,197 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:01:03,197 INFO L195 NwaCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:01:03,220 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2022-07-12 13:01:03,411 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable2 [2022-07-12 13:01:03,412 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:01:03,412 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:01:03,412 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2022-07-12 13:01:03,412 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 13:01:03,412 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1485641379] [2022-07-12 13:01:03,412 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:03,412 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 13:01:03,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 13:01:03,600 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-12 13:01:03,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 13:01:03,741 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-12 13:01:03,741 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-12 13:01:03,742 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 13:01:03,743 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 13:01:03,745 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2022-07-12 13:01:03,747 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 13:01:03,762 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 13:01:03,763 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 13:01:03,834 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 01:01:03 BoogieIcfgContainer [2022-07-12 13:01:03,834 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 13:01:03,835 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 13:01:03,835 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 13:01:03,835 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 13:01:03,835 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 01:00:59" (3/4) ... [2022-07-12 13:01:03,837 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-12 13:01:03,838 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 13:01:03,838 INFO L158 Benchmark]: Toolchain (without parser) took 7004.08ms. Allocated memory was 113.2MB in the beginning and 293.6MB in the end (delta: 180.4MB). Free memory was 76.3MB in the beginning and 95.2MB in the end (delta: -18.9MB). Peak memory consumption was 161.3MB. Max. memory is 16.1GB. [2022-07-12 13:01:03,838 INFO L158 Benchmark]: CDTParser took 0.15ms. Allocated memory is still 113.2MB. Free memory is still 69.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 13:01:03,838 INFO L158 Benchmark]: CACSL2BoogieTranslator took 840.31ms. Allocated memory was 113.2MB in the beginning and 151.0MB in the end (delta: 37.7MB). Free memory was 76.3MB in the beginning and 76.2MB in the end (delta: 34.5kB). Peak memory consumption was 37.1MB. Max. memory is 16.1GB. [2022-07-12 13:01:03,839 INFO L158 Benchmark]: Boogie Procedure Inliner took 105.78ms. Allocated memory is still 151.0MB. Free memory was 76.2MB in the beginning and 63.6MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-12 13:01:03,839 INFO L158 Benchmark]: Boogie Preprocessor took 123.07ms. Allocated memory is still 151.0MB. Free memory was 63.6MB in the beginning and 94.0MB in the end (delta: -30.4MB). Peak memory consumption was 15.3MB. Max. memory is 16.1GB. [2022-07-12 13:01:03,839 INFO L158 Benchmark]: RCFGBuilder took 1328.07ms. Allocated memory was 151.0MB in the beginning and 243.3MB in the end (delta: 92.3MB). Free memory was 94.0MB in the beginning and 173.9MB in the end (delta: -79.9MB). Peak memory consumption was 75.3MB. Max. memory is 16.1GB. [2022-07-12 13:01:03,839 INFO L158 Benchmark]: TraceAbstraction took 4598.28ms. Allocated memory was 243.3MB in the beginning and 293.6MB in the end (delta: 50.3MB). Free memory was 173.9MB in the beginning and 95.2MB in the end (delta: 78.7MB). Peak memory consumption was 130.0MB. Max. memory is 16.1GB. [2022-07-12 13:01:03,839 INFO L158 Benchmark]: Witness Printer took 2.77ms. Allocated memory is still 293.6MB. Free memory is still 95.2MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 13:01:03,841 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15ms. Allocated memory is still 113.2MB. Free memory is still 69.4MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 840.31ms. Allocated memory was 113.2MB in the beginning and 151.0MB in the end (delta: 37.7MB). Free memory was 76.3MB in the beginning and 76.2MB in the end (delta: 34.5kB). Peak memory consumption was 37.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 105.78ms. Allocated memory is still 151.0MB. Free memory was 76.2MB in the beginning and 63.6MB in the end (delta: 12.6MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * Boogie Preprocessor took 123.07ms. Allocated memory is still 151.0MB. Free memory was 63.6MB in the beginning and 94.0MB in the end (delta: -30.4MB). Peak memory consumption was 15.3MB. Max. memory is 16.1GB. * RCFGBuilder took 1328.07ms. Allocated memory was 151.0MB in the beginning and 243.3MB in the end (delta: 92.3MB). Free memory was 94.0MB in the beginning and 173.9MB in the end (delta: -79.9MB). Peak memory consumption was 75.3MB. Max. memory is 16.1GB. * TraceAbstraction took 4598.28ms. Allocated memory was 243.3MB in the beginning and 293.6MB in the end (delta: 50.3MB). Free memory was 173.9MB in the beginning and 95.2MB in the end (delta: 78.7MB). Peak memory consumption was 130.0MB. Max. memory is 16.1GB. * Witness Printer took 2.77ms. Allocated memory is still 293.6MB. Free memory is still 95.2MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=1, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=1, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={-18446744073709551615:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={-18446744073709551615:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={42:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={43:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=1, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={42:0}, ldvarg1={0:0}, ldvarg2=-2, ldvarg3={0:0}, ldvarg4={43:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=-2, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={65525:65524}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=1, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 4.5s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 1.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 269 SdHoareTripleChecker+Valid, 1.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 261 mSDsluCounter, 6836 SdHoareTripleChecker+Invalid, 0.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5435 mSDsCounter, 299 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 1221 IncrementalHoareTripleChecker+Invalid, 1520 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 299 mSolverCounterUnsat, 1401 mSDtfsCounter, 1221 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 253 GetRequests, 214 SyntacticMatches, 2 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 51 ImplicationChecksByTransitivity, 0.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 26, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 15 StatesRemovedByMinimization, 2 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 0.9s SatisfiabilityAnalysisTime, 0.9s InterpolantComputationTime, 372 NumberOfCodeBlocks, 372 NumberOfCodeBlocksAsserted, 6 NumberOfCheckSat, 360 ConstructedInterpolants, 0 QuantifiedInterpolants, 716 SizeOfPredicates, 2 NumberOfNonLiveVariables, 4640 ConjunctsInSsa, 17 ConjunctsInUnsatCore, 6 InterpolantComputations, 2 PerfectInterpolantSequences, 93/111 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-12 13:01:03,876 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 13:01:05,527 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 13:01:05,528 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 13:01:05,550 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 13:01:05,550 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 13:01:05,551 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 13:01:05,556 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 13:01:05,558 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 13:01:05,560 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 13:01:05,569 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 13:01:05,570 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 13:01:05,574 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 13:01:05,574 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 13:01:05,576 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 13:01:05,577 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 13:01:05,578 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 13:01:05,578 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 13:01:05,580 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 13:01:05,583 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 13:01:05,586 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 13:01:05,588 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 13:01:05,589 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 13:01:05,591 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 13:01:05,592 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 13:01:05,593 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 13:01:05,601 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 13:01:05,602 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 13:01:05,602 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 13:01:05,603 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 13:01:05,604 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 13:01:05,604 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 13:01:05,605 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 13:01:05,606 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 13:01:05,607 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 13:01:05,608 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 13:01:05,609 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 13:01:05,610 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 13:01:05,610 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 13:01:05,610 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 13:01:05,611 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 13:01:05,611 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 13:01:05,613 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 13:01:05,621 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-07-12 13:01:05,649 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 13:01:05,649 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 13:01:05,650 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 13:01:05,650 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 13:01:05,650 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 13:01:05,651 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 13:01:05,651 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 13:01:05,651 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 13:01:05,651 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 13:01:05,652 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 13:01:05,652 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 13:01:05,652 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 13:01:05,653 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 13:01:05,653 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 13:01:05,653 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-07-12 13:01:05,653 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-07-12 13:01:05,653 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-07-12 13:01:05,653 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 13:01:05,654 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 13:01:05,654 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 13:01:05,654 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 13:01:05,654 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 13:01:05,654 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 13:01:05,654 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 13:01:05,655 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 13:01:05,655 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 13:01:05,655 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 13:01:05,655 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-07-12 13:01:05,655 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-07-12 13:01:05,655 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 13:01:05,656 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 13:01:05,656 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 13:01:05,656 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-07-12 13:01:05,656 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 46b0ad08a581b5bde0454ec418cbe0193c7ec6a3f6e007f87f30934488ee8554 [2022-07-12 13:01:05,934 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 13:01:05,950 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 13:01:05,952 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 13:01:05,953 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 13:01:05,954 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 13:01:05,955 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-12 13:01:06,003 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/165a2c99a/723494b4f5b145e2aa9b2972ddb20810/FLAGce5efdffc [2022-07-12 13:01:06,542 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 13:01:06,542 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-12 13:01:06,572 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/165a2c99a/723494b4f5b145e2aa9b2972ddb20810/FLAGce5efdffc [2022-07-12 13:01:06,978 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/165a2c99a/723494b4f5b145e2aa9b2972ddb20810 [2022-07-12 13:01:06,980 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 13:01:06,981 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 13:01:06,982 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 13:01:06,982 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 13:01:06,984 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 13:01:06,984 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 01:01:06" (1/1) ... [2022-07-12 13:01:06,985 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@37077576 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:06, skipping insertion in model container [2022-07-12 13:01:06,985 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 01:01:06" (1/1) ... [2022-07-12 13:01:06,995 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 13:01:07,057 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 13:01:07,372 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-12 13:01:07,376 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-12 13:01:07,376 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-12 13:01:07,377 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-12 13:01:07,382 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-12 13:01:07,382 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-12 13:01:07,382 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-12 13:01:07,383 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-12 13:01:07,392 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-12 13:01:07,392 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-12 13:01:07,392 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-12 13:01:07,393 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-12 13:01:07,393 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-12 13:01:07,393 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-12 13:01:07,394 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-12 13:01:07,394 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-12 13:01:07,395 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-12 13:01:07,395 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-12 13:01:07,395 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-12 13:01:07,395 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-12 13:01:07,502 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-12 13:01:07,637 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 13:01:07,676 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-07-12 13:01:07,712 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 13:01:07,754 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-12 13:01:07,754 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-12 13:01:07,754 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-12 13:01:07,755 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-12 13:01:07,756 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-12 13:01:07,757 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-12 13:01:07,757 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-12 13:01:07,758 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-12 13:01:07,761 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-12 13:01:07,761 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-12 13:01:07,761 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-12 13:01:07,761 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-12 13:01:07,762 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-12 13:01:07,762 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-12 13:01:07,762 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-12 13:01:07,762 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-12 13:01:07,763 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-12 13:01:07,763 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-12 13:01:07,763 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-12 13:01:07,763 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-12 13:01:07,801 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-12 13:01:07,860 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 13:01:07,915 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 13:01:07,993 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name writepages at C: (*writepages)(struct address_space___0 * , struct writeback_control * ) [3504] [2022-07-12 13:01:07,994 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name readpages at C: (*readpages)(struct file___0 *filp , struct address_space___0 *mapping , struct list_head *pages , unsigned int nr_pages ) [3506-3507] [2022-07-12 13:01:07,994 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_begin at C: (*write_begin)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int flags , struct page **pagep , void **fsdata ) [3508-3510] [2022-07-12 13:01:07,994 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name write_end at C: (*write_end)(struct file___0 * , struct address_space___0 *mapping , loff_t pos , unsigned int len , unsigned int copied , struct page *page , void *fsdata ) [3511-3512] [2022-07-12 13:01:07,994 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name bmap at C: (*bmap)(struct address_space___0 * , sector_t ) [3513] [2022-07-12 13:01:07,994 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name get_xip_mem at C: (*get_xip_mem)(struct address_space___0 * , unsigned long , int , void ** , unsigned long * ) [3519-3520] [2022-07-12 13:01:07,994 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name migratepage at C: (*migratepage)(struct address_space___0 * , struct page * , struct page * ) [3521] [2022-07-12 13:01:07,994 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name error_remove_page at C: (*error_remove_page)(struct address_space___0 * , struct page * ) [3524] [2022-07-12 13:01:07,998 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name lookup at C: *(*lookup)(struct tty_driver___0 *driver , struct inode___0 *inode , int idx ) [3838-3839] [2022-07-12 13:01:07,998 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name install at C: (*install)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3840] [2022-07-12 13:01:07,999 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name remove at C: (*remove)(struct tty_driver___0 *driver , struct tty_struct___0 *tty ) [3841] [2022-07-12 13:01:07,999 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_init at C: (*poll_init)(struct tty_driver___0 *driver , int line , char *options ) [3872] [2022-07-12 13:01:07,999 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_get_char at C: (*poll_get_char)(struct tty_driver___0 *driver , int line ) [3873] [2022-07-12 13:01:08,000 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name poll_put_char at C: (*poll_put_char)(struct tty_driver___0 *driver , int line , char ch ) [3874] [2022-07-12 13:01:08,000 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name carrier_raised at C: (*carrier_raised)(struct tty_port___0 *port ) [3934] [2022-07-12 13:01:08,001 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name dtr_rts at C: (*dtr_rts)(struct tty_port___0 *port , int raise ) [3935] [2022-07-12 13:01:08,001 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name shutdown at C: (*shutdown)(struct tty_port___0 *port ) [3936] [2022-07-12 13:01:08,001 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name drop at C: (*drop)(struct tty_port___0 *port ) [3937] [2022-07-12 13:01:08,001 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name activate at C: (*activate)(struct tty_port___0 *port , struct tty_struct___0 *tty ) [3938] [2022-07-12 13:01:08,001 WARN L1251 CHandler]: Detected problem Invalid redeclaration of the name destruct at C: (*destruct)(struct tty_port___0 *port ) [3939] [2022-07-12 13:01:08,017 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.6/linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i[129647,129660] [2022-07-12 13:01:08,065 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 13:01:08,133 INFO L208 MainTranslator]: Completed translation [2022-07-12 13:01:08,133 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08 WrapperNode [2022-07-12 13:01:08,133 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 13:01:08,134 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 13:01:08,135 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 13:01:08,135 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 13:01:08,139 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,179 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,249 INFO L137 Inliner]: procedures = 107, calls = 1014, calls flagged for inlining = 45, calls inlined = 43, statements flattened = 1826 [2022-07-12 13:01:08,250 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 13:01:08,251 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 13:01:08,251 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 13:01:08,251 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 13:01:08,256 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,257 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,273 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,273 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,324 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,343 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,353 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,372 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 13:01:08,374 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 13:01:08,374 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 13:01:08,374 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 13:01:08,375 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (1/1) ... [2022-07-12 13:01:08,379 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 13:01:08,386 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 13:01:08,395 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 13:01:08,414 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 13:01:08,434 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-07-12 13:01:08,434 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-07-12 13:01:08,434 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_open [2022-07-12 13:01:08,434 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_open [2022-07-12 13:01:08,434 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2022-07-12 13:01:08,434 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2022-07-12 13:01:08,434 INFO L130 BoogieDeclarations]: Found specification of procedure usb_set_interface [2022-07-12 13:01:08,434 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_set_interface [2022-07-12 13:01:08,434 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2022-07-12 13:01:08,434 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2022-07-12 13:01:08,434 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-12 13:01:08,434 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-12 13:01:08,435 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-12 13:01:08,435 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-12 13:01:08,435 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_disconnect [2022-07-12 13:01:08,435 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_disconnect [2022-07-12 13:01:08,435 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-12 13:01:08,435 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-12 13:01:08,435 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_disconnect [2022-07-12 13:01:08,435 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_disconnect [2022-07-12 13:01:08,435 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-12 13:01:08,435 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-12 13:01:08,436 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write_room [2022-07-12 13:01:08,436 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write_room [2022-07-12 13:01:08,436 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2022-07-12 13:01:08,436 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2022-07-12 13:01:08,436 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-12 13:01:08,436 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop___0 [2022-07-12 13:01:08,437 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop___0 [2022-07-12 13:01:08,437 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-12 13:01:08,437 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 13:01:08,437 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-12 13:01:08,437 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-12 13:01:08,437 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-12 13:01:08,437 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-12 13:01:08,437 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-12 13:01:08,437 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_resume [2022-07-12 13:01:08,438 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_resume [2022-07-12 13:01:08,438 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-12 13:01:08,438 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-12 13:01:08,438 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-12 13:01:08,438 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-12 13:01:08,438 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2022-07-12 13:01:08,438 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-07-12 13:01:08,439 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-07-12 13:01:08,439 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-07-12 13:01:08,439 INFO L130 BoogieDeclarations]: Found specification of procedure usb_serial_deregister [2022-07-12 13:01:08,439 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_serial_deregister [2022-07-12 13:01:08,439 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_write [2022-07-12 13:01:08,439 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_write [2022-07-12 13:01:08,439 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_suspend [2022-07-12 13:01:08,440 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_suspend [2022-07-12 13:01:08,441 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_close [2022-07-12 13:01:08,441 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_close [2022-07-12 13:01:08,441 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_zalloc [2022-07-12 13:01:08,441 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_zalloc [2022-07-12 13:01:08,442 INFO L130 BoogieDeclarations]: Found specification of procedure usb_wwan_chars_in_buffer [2022-07-12 13:01:08,442 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_wwan_chars_in_buffer [2022-07-12 13:01:08,443 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 13:01:08,443 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 13:01:08,728 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 13:01:08,729 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 13:01:08,917 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2022-07-12 13:01:08,973 INFO L764 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stop___0FINAL: assume true; [2022-07-12 13:01:10,303 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 13:01:10,324 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 13:01:10,325 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-12 13:01:10,327 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 01:01:10 BoogieIcfgContainer [2022-07-12 13:01:10,328 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 13:01:10,329 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 13:01:10,329 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 13:01:10,331 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 13:01:10,331 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 01:01:06" (1/3) ... [2022-07-12 13:01:10,331 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5e9df1be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 01:01:10, skipping insertion in model container [2022-07-12 13:01:10,331 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 01:01:08" (2/3) ... [2022-07-12 13:01:10,331 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@5e9df1be and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 01:01:10, skipping insertion in model container [2022-07-12 13:01:10,332 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 01:01:10" (3/3) ... [2022-07-12 13:01:10,332 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-4ed3cba-1-100_1a-drivers--usb--serial--qcserial.ko-entry_point.cil.out.i [2022-07-12 13:01:10,342 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 13:01:10,342 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 13:01:10,392 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 13:01:10,396 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5f355374, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@62ebe339 [2022-07-12 13:01:10,396 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 13:01:10,404 INFO L276 IsEmpty]: Start isEmpty. Operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) [2022-07-12 13:01:10,416 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 56 [2022-07-12 13:01:10,416 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:01:10,416 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:01:10,417 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:01:10,421 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:01:10,421 INFO L85 PathProgramCache]: Analyzing trace with hash -1231564632, now seen corresponding path program 1 times [2022-07-12 13:01:10,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 13:01:10,433 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [487318438] [2022-07-12 13:01:10,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:10,434 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 13:01:10,434 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 13:01:10,436 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 13:01:10,437 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-07-12 13:01:11,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:11,305 INFO L263 TraceCheckSpWp]: Trace formula consists of 1929 conjuncts, 7 conjunts are in the unsatisfiable core [2022-07-12 13:01:11,310 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 13:01:11,426 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 16 trivial. 0 not checked. [2022-07-12 13:01:11,427 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 13:01:11,427 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 13:01:11,428 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [487318438] [2022-07-12 13:01:11,428 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [487318438] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 13:01:11,428 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 13:01:11,428 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 13:01:11,430 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [389468551] [2022-07-12 13:01:11,431 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 13:01:11,434 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 13:01:11,434 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 13:01:11,452 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 13:01:11,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 13:01:11,455 INFO L87 Difference]: Start difference. First operand has 397 states, 313 states have (on average 1.4792332268370607) internal successors, (463), 322 states have internal predecessors, (463), 62 states have call successors, (62), 22 states have call predecessors, (62), 20 states have return successors, (57), 57 states have call predecessors, (57), 57 states have call successors, (57) Second operand has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 13:01:11,686 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 13:01:11,687 INFO L93 Difference]: Finished difference Result 751 states and 1103 transitions. [2022-07-12 13:01:11,688 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2022-07-12 13:01:11,689 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) Word has length 55 [2022-07-12 13:01:11,689 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 13:01:11,698 INFO L225 Difference]: With dead ends: 751 [2022-07-12 13:01:11,698 INFO L226 Difference]: Without dead ends: 344 [2022-07-12 13:01:11,703 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 56 GetRequests, 51 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=15, Invalid=27, Unknown=0, NotChecked=0, Total=42 [2022-07-12 13:01:11,705 INFO L413 NwaCegarLoop]: 480 mSDtfsCounter, 34 mSDsluCounter, 1419 mSDsCounter, 0 mSdLazyCounter, 13 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 35 SdHoareTripleChecker+Valid, 1899 SdHoareTripleChecker+Invalid, 14 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 13 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2022-07-12 13:01:11,706 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [35 Valid, 1899 Invalid, 14 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 13 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2022-07-12 13:01:11,718 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 344 states. [2022-07-12 13:01:11,766 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 344 to 342. [2022-07-12 13:01:11,767 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 342 states, 266 states have (on average 1.413533834586466) internal successors, (376), 268 states have internal predecessors, (376), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-12 13:01:11,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 342 states to 342 states and 485 transitions. [2022-07-12 13:01:11,770 INFO L78 Accepts]: Start accepts. Automaton has 342 states and 485 transitions. Word has length 55 [2022-07-12 13:01:11,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 13:01:11,770 INFO L495 AbstractCegarLoop]: Abstraction has 342 states and 485 transitions. [2022-07-12 13:01:11,770 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 6.6) internal successors, (33), 4 states have internal predecessors, (33), 2 states have call successors, (7), 2 states have call predecessors, (7), 3 states have return successors, (6), 3 states have call predecessors, (6), 2 states have call successors, (6) [2022-07-12 13:01:11,770 INFO L276 IsEmpty]: Start isEmpty. Operand 342 states and 485 transitions. [2022-07-12 13:01:11,772 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 62 [2022-07-12 13:01:11,773 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:01:11,773 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:01:11,804 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2022-07-12 13:01:11,987 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 13:01:11,988 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:01:11,988 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:01:11,988 INFO L85 PathProgramCache]: Analyzing trace with hash 1625900424, now seen corresponding path program 1 times [2022-07-12 13:01:11,991 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 13:01:11,991 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [596526776] [2022-07-12 13:01:11,991 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:11,991 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 13:01:11,992 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 13:01:12,016 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 13:01:12,017 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-07-12 13:01:12,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:12,768 INFO L263 TraceCheckSpWp]: Trace formula consists of 1946 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-12 13:01:12,771 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 13:01:12,798 INFO L134 CoverageAnalysis]: Checked inductivity of 16 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 12 trivial. 0 not checked. [2022-07-12 13:01:12,798 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 13:01:12,799 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 13:01:12,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [596526776] [2022-07-12 13:01:12,799 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [596526776] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 13:01:12,799 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 13:01:12,799 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 13:01:12,799 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1985083283] [2022-07-12 13:01:12,799 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 13:01:12,800 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 13:01:12,801 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 13:01:12,802 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 13:01:12,802 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-12 13:01:12,802 INFO L87 Difference]: Start difference. First operand 342 states and 485 transitions. Second operand has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-12 13:01:12,852 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 13:01:12,853 INFO L93 Difference]: Finished difference Result 657 states and 940 transitions. [2022-07-12 13:01:12,853 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-12 13:01:12,854 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) Word has length 61 [2022-07-12 13:01:12,854 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 13:01:12,855 INFO L225 Difference]: With dead ends: 657 [2022-07-12 13:01:12,856 INFO L226 Difference]: Without dead ends: 343 [2022-07-12 13:01:12,857 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 61 GetRequests, 58 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-12 13:01:12,858 INFO L413 NwaCegarLoop]: 466 mSDtfsCounter, 2 mSDsluCounter, 929 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 1395 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 13:01:12,858 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [2 Valid, 1395 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 13:01:12,859 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 343 states. [2022-07-12 13:01:12,866 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 343 to 343. [2022-07-12 13:01:12,866 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 343 states, 267 states have (on average 1.4119850187265917) internal successors, (377), 269 states have internal predecessors, (377), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-12 13:01:12,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 343 states to 343 states and 486 transitions. [2022-07-12 13:01:12,868 INFO L78 Accepts]: Start accepts. Automaton has 343 states and 486 transitions. Word has length 61 [2022-07-12 13:01:12,868 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 13:01:12,868 INFO L495 AbstractCegarLoop]: Abstraction has 343 states and 486 transitions. [2022-07-12 13:01:12,868 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 10.0) internal successors, (40), 4 states have internal predecessors, (40), 2 states have call successors, (8), 2 states have call predecessors, (8), 3 states have return successors, (7), 2 states have call predecessors, (7), 2 states have call successors, (7) [2022-07-12 13:01:12,869 INFO L276 IsEmpty]: Start isEmpty. Operand 343 states and 486 transitions. [2022-07-12 13:01:12,870 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-12 13:01:12,870 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:01:12,870 INFO L195 NwaCegarLoop]: trace histogram [3, 3, 3, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:01:12,900 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-07-12 13:01:13,083 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 13:01:13,086 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:01:13,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:01:13,087 INFO L85 PathProgramCache]: Analyzing trace with hash -254069280, now seen corresponding path program 1 times [2022-07-12 13:01:13,089 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 13:01:13,089 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [124058352] [2022-07-12 13:01:13,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 13:01:13,090 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 13:01:13,090 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 13:01:13,091 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 13:01:13,092 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-07-12 13:01:13,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 13:01:13,939 INFO L263 TraceCheckSpWp]: Trace formula consists of 1968 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-12 13:01:13,943 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 13:01:13,963 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 7 proven. 1 refuted. 0 times theorem prover too weak. 13 trivial. 0 not checked. [2022-07-12 13:01:13,963 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2022-07-12 13:01:14,071 INFO L134 CoverageAnalysis]: Checked inductivity of 21 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 14 trivial. 0 not checked. [2022-07-12 13:01:14,072 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 13:01:14,072 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [124058352] [2022-07-12 13:01:14,072 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [124058352] provided 0 perfect and 2 imperfect interpolant sequences [2022-07-12 13:01:14,072 INFO L184 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2022-07-12 13:01:14,072 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [5, 5] total 8 [2022-07-12 13:01:14,072 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1848194128] [2022-07-12 13:01:14,072 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2022-07-12 13:01:14,073 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2022-07-12 13:01:14,073 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 13:01:14,073 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-12 13:01:14,073 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=22, Invalid=34, Unknown=0, NotChecked=0, Total=56 [2022-07-12 13:01:14,074 INFO L87 Difference]: Start difference. First operand 343 states and 486 transitions. Second operand has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-12 13:01:14,172 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 13:01:14,172 INFO L93 Difference]: Finished difference Result 663 states and 949 transitions. [2022-07-12 13:01:14,172 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2022-07-12 13:01:14,173 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 63 [2022-07-12 13:01:14,173 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 13:01:14,174 INFO L225 Difference]: With dead ends: 663 [2022-07-12 13:01:14,174 INFO L226 Difference]: Without dead ends: 346 [2022-07-12 13:01:14,175 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 126 GetRequests, 118 SyntacticMatches, 0 SemanticMatches, 8 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=38, Invalid=52, Unknown=0, NotChecked=0, Total=90 [2022-07-12 13:01:14,176 INFO L413 NwaCegarLoop]: 466 mSDtfsCounter, 7 mSDsluCounter, 2784 mSDsCounter, 0 mSdLazyCounter, 27 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7 SdHoareTripleChecker+Valid, 3250 SdHoareTripleChecker+Invalid, 33 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 27 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 13:01:14,176 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [7 Valid, 3250 Invalid, 33 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 27 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 13:01:14,177 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 346 states. [2022-07-12 13:01:14,183 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 346 to 346. [2022-07-12 13:01:14,183 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 346 states, 270 states have (on average 1.4074074074074074) internal successors, (380), 272 states have internal predecessors, (380), 55 states have call successors, (55), 21 states have call predecessors, (55), 20 states have return successors, (54), 54 states have call predecessors, (54), 54 states have call successors, (54) [2022-07-12 13:01:14,184 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 346 states to 346 states and 489 transitions. [2022-07-12 13:01:14,185 INFO L78 Accepts]: Start accepts. Automaton has 346 states and 489 transitions. Word has length 63 [2022-07-12 13:01:14,185 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 13:01:14,185 INFO L495 AbstractCegarLoop]: Abstraction has 346 states and 489 transitions. [2022-07-12 13:01:14,185 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 6.25) internal successors, (50), 8 states have internal predecessors, (50), 2 states have call successors, (9), 2 states have call predecessors, (9), 4 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2022-07-12 13:01:14,185 INFO L276 IsEmpty]: Start isEmpty. Operand 346 states and 489 transitions. [2022-07-12 13:01:14,186 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-12 13:01:14,186 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 13:01:14,186 INFO L195 NwaCegarLoop]: trace histogram [8, 3, 3, 3, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 13:01:14,218 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-07-12 13:01:14,387 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 13:01:14,388 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 13:01:14,388 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 13:01:14,388 INFO L85 PathProgramCache]: Analyzing trace with hash -66426872, now seen corresponding path program 2 times [2022-07-12 13:01:14,390 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 13:01:14,390 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1943352389] [2022-07-12 13:01:14,390 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2022-07-12 13:01:14,390 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 13:01:14,391 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 13:01:14,392 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 13:01:14,392 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-07-12 13:01:19,385 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2022-07-12 13:01:19,385 INFO L229 tOrderPrioritization]: Conjunction of SSA is sat [2022-07-12 13:01:19,385 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-12 13:01:24,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 13:01:24,937 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-07-12 13:01:24,937 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-12 13:01:24,938 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 13:01:25,005 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-07-12 13:01:25,155 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 13:01:25,158 INFO L356 BasicCegarLoop]: Path program histogram: [2, 1, 1] [2022-07-12 13:01:25,161 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 13:01:25,187 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 13:01:25,189 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2022-07-12 13:01:25,256 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 01:01:25 BoogieIcfgContainer [2022-07-12 13:01:25,257 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 13:01:25,257 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 13:01:25,257 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 13:01:25,258 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 13:01:25,258 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 01:01:10" (3/4) ... [2022-07-12 13:01:25,262 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-12 13:01:25,262 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 13:01:25,262 INFO L158 Benchmark]: Toolchain (without parser) took 18281.58ms. Allocated memory was 48.2MB in the beginning and 306.2MB in the end (delta: 257.9MB). Free memory was 26.9MB in the beginning and 98.4MB in the end (delta: -71.5MB). Peak memory consumption was 186.8MB. Max. memory is 16.1GB. [2022-07-12 13:01:25,264 INFO L158 Benchmark]: CDTParser took 0.13ms. Allocated memory is still 48.2MB. Free memory was 29.7MB in the beginning and 29.7MB in the end (delta: 54.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 13:01:25,264 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1151.95ms. Allocated memory was 48.2MB in the beginning and 86.0MB in the end (delta: 37.7MB). Free memory was 26.8MB in the beginning and 39.8MB in the end (delta: -13.0MB). Peak memory consumption was 38.0MB. Max. memory is 16.1GB. [2022-07-12 13:01:25,265 INFO L158 Benchmark]: Boogie Procedure Inliner took 115.56ms. Allocated memory was 86.0MB in the beginning and 153.1MB in the end (delta: 67.1MB). Free memory was 39.8MB in the beginning and 107.1MB in the end (delta: -67.3MB). Peak memory consumption was 12.8MB. Max. memory is 16.1GB. [2022-07-12 13:01:25,265 INFO L158 Benchmark]: Boogie Preprocessor took 122.01ms. Allocated memory is still 153.1MB. Free memory was 107.1MB in the beginning and 95.8MB in the end (delta: 11.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-12 13:01:25,266 INFO L158 Benchmark]: RCFGBuilder took 1954.09ms. Allocated memory was 153.1MB in the beginning and 306.2MB in the end (delta: 153.1MB). Free memory was 95.1MB in the beginning and 220.5MB in the end (delta: -125.3MB). Peak memory consumption was 86.6MB. Max. memory is 16.1GB. [2022-07-12 13:01:25,267 INFO L158 Benchmark]: TraceAbstraction took 14928.12ms. Allocated memory is still 306.2MB. Free memory was 220.5MB in the beginning and 98.4MB in the end (delta: 122.1MB). Peak memory consumption was 123.1MB. Max. memory is 16.1GB. [2022-07-12 13:01:25,267 INFO L158 Benchmark]: Witness Printer took 4.77ms. Allocated memory is still 306.2MB. Free memory is still 98.4MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 13:01:25,268 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13ms. Allocated memory is still 48.2MB. Free memory was 29.7MB in the beginning and 29.7MB in the end (delta: 54.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1151.95ms. Allocated memory was 48.2MB in the beginning and 86.0MB in the end (delta: 37.7MB). Free memory was 26.8MB in the beginning and 39.8MB in the end (delta: -13.0MB). Peak memory consumption was 38.0MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 115.56ms. Allocated memory was 86.0MB in the beginning and 153.1MB in the end (delta: 67.1MB). Free memory was 39.8MB in the beginning and 107.1MB in the end (delta: -67.3MB). Peak memory consumption was 12.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 122.01ms. Allocated memory is still 153.1MB. Free memory was 107.1MB in the beginning and 95.8MB in the end (delta: 11.2MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * RCFGBuilder took 1954.09ms. Allocated memory was 153.1MB in the beginning and 306.2MB in the end (delta: 153.1MB). Free memory was 95.1MB in the beginning and 220.5MB in the end (delta: -125.3MB). Peak memory consumption was 86.6MB. Max. memory is 16.1GB. * TraceAbstraction took 14928.12ms. Allocated memory is still 306.2MB. Free memory was 220.5MB in the beginning and 98.4MB in the end (delta: 122.1MB). Peak memory consumption was 123.1MB. Max. memory is 16.1GB. * Witness Printer took 4.77ms. Allocated memory is still 306.2MB. Free memory is still 98.4MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 4381]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 4684. Possible FailurePath: [L4404] int LDV_IN_INTERRUPT = 1; [L4405] int ldv_state_variable_2 ; [L4406] int ref_cnt ; [L4407] struct usb_serial *qcdevice_group1 ; [L4408] int ldv_state_variable_1 ; [L4409] struct usb_interface *qcdriver_group1 ; [L4410] int usb_counter ; [L4411] struct tty_struct *qcdevice_group0 ; [L4412] struct usb_serial_port *qcdevice_group2 ; [L4413] int ldv_state_variable_0 ; [L4507] static int debug ; [L4508-L4681] static struct usb_device_id const id_table[59U] = { {3U, 1478U, 37393U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37394U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 7965U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 8221U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9485U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1242U, 9484U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33138U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33137U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40961U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5136U, 40968U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6006U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 2821U, 6004U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65523U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 6610U, 65522U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5463U, 2688U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37378U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37379U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37410U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37377U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37409U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37425U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 8005U, 1U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33157U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 16700U, 33158U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37384U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37387U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37412U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37413U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37444U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37445U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9245U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1008U, 9501U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37396U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37397U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37476U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37477U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37428U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37429U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37492U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37493U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36864U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36865U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36866U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36867U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36868U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36869U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36870U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36871U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36872U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36873U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 4505U, 36874U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32769U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 5848U, 32770U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37380U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1478U, 37381U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4682] struct usb_device_id const __mod_usb_device_table ; [L4683-L4697] static struct usb_driver qcdriver = {"qcserial", & usb_serial_probe, & usb_serial_disconnect, 0, & usb_serial_suspend, & usb_serial_resume, 0, 0, 0, (struct usb_device_id const *)(& id_table), {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0}; [L4833-L4839] static struct usb_serial_driver qcdevice = {"Qualcomm USB modem", (struct usb_device_id const *)(& id_table), 1, {0, 0}, {"qcserial", 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, & qcdriver, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, 0UL, 0UL, & qcprobe, & usb_wwan_startup, 0, & usb_wwan_disconnect, & usb_wwan_release, 0, 0, & usb_wwan_suspend, & usb_wwan_resume, & usb_wwan_open, & usb_wwan_close, & usb_wwan_write, & usb_wwan_write_room, 0, 0, 0, & usb_wwan_chars_in_buffer, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L4867] int ldv_retval_9 ; [L4868] int ldv_retval_2 ; [L4869] int ldv_retval_5 ; [L4870] int ldv_retval_0 ; [L4871] int ldv_retval_4 ; [L4872] int ldv_retval_6 ; [L4874] int ldv_retval_1 ; [L4876] int ldv_retval_8 ; [L4877] int ldv_retval_3 ; [L4878] int ldv_retval_7 ; [L5297] struct tty_struct___0 *ldv_latest_tty ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4905] struct usb_device_id *ldvarg1 ; [L4906] void *tmp ; [L4907] unsigned char *ldvarg3 ; [L4908] void *tmp___0 ; [L4909] pm_message_t ldvarg0 ; [L4910] int ldvarg2 ; [L4911] int tmp___1 ; [L4912] pm_message_t ldvarg4 ; [L4913] struct usb_device_id *ldvarg5 ; [L4914] void *tmp___2 ; [L4915] int tmp___3 ; [L4916] int tmp___4 ; [L4917] int tmp___5 ; [L4918] int tmp___6 ; VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4920] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={58:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4920] tmp = ldv_zalloc(24UL) [L4921] ldvarg1 = (struct usb_device_id *)tmp VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] CALL, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=1, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=1, tmp___0=2147483648, usb_counter=0] [L4922] RET, EXPR ldv_zalloc(1UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(1UL)={0:0}, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, usb_counter=0] [L4922] tmp___0 = ldv_zalloc(1UL) [L4923] ldvarg3 = (unsigned char *)tmp___0 [L4924] tmp___1 = __VERIFIER_nondet_int() [L4925] ldvarg2 = tmp___1 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] CALL, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4346] void *p ; [L4347] void *tmp ; [L4348] int tmp___0 ; [L4350] tmp___0 = __VERIFIER_nondet_int() [L4351] COND TRUE tmp___0 != 0 [L4352] return ((void *)0); VAL [\old(size)=24, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=24, tmp___0=2147483648, usb_counter=0] [L4926] RET, EXPR ldv_zalloc(24UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_zalloc(24UL)={0:0}, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, usb_counter=0] [L4926] tmp___2 = ldv_zalloc(24UL) [L4927] ldvarg5 = (struct usb_device_id *)tmp___2 [L4928] CALL ldv_initialize() [L5301] CALL, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4329] void *p ; [L4330] void *tmp ; [L4331] int tmp___0 ; [L4333] tmp___0 = __VERIFIER_nondet_int() [L4334] COND FALSE !(tmp___0 != 0) [L4337] tmp = malloc(size) [L4338] p = tmp VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L4339] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4325] COND FALSE !(!cond) VAL [\old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, cond=1, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4339] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [\old(size)=2516, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L4340] return (p); VAL [\old(size)=2516, \result={37:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, p={37:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, size=2516, tmp={37:0}, tmp___0=0, usb_counter=0] [L5301] RET, EXPR ldv_malloc(sizeof(struct tty_struct___0)) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={0:0}, ldv_malloc(sizeof(struct tty_struct___0))={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L5301] ldv_latest_tty = ldv_malloc(sizeof(struct tty_struct___0)) [L5302] COND TRUE (unsigned long )ldv_latest_tty != (unsigned long )((void *)0) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4928] RET ldv_initialize() [L4929] FCALL memset((void *)(& ldvarg0), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, memset((void *)(& ldvarg0), 0, 4UL)={58:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4930] FCALL memset((void *)(& ldvarg4), 0, 4UL) VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, memset((void *)(& ldvarg4), 0, 4UL)={87:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4931] ldv_state_variable_1 = 0 [L4932] ref_cnt = 0 [L4933] ldv_state_variable_0 = 1 [L4934] ldv_state_variable_2 = 0 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, usb_counter=0] [L4936] tmp___3 = __VERIFIER_nondet_int() [L4938] case 0: [L5144] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, usb_counter=0] [L5145] COND TRUE ldv_state_variable_0 != 0 [L5146] tmp___5 = __VERIFIER_nondet_int() [L5148] case 0: [L5156] case 1: VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5157] COND TRUE ldv_state_variable_0 == 1 [L5158] CALL, EXPR qcinit() [L4842] int retval ; [L4844] CALL, EXPR usb_serial_register(& qcdevice) [L5392] return __VERIFIER_nondet_int(); [L4844] RET, EXPR usb_serial_register(& qcdevice) [L4844] retval = usb_serial_register(& qcdevice) [L4845] COND TRUE retval != 0 [L4846] return (retval); VAL [\result=-2147483648, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=0, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=1, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, retval=2147483648, usb_counter=0] [L5158] RET, EXPR qcinit() [L5158] ldv_retval_5 = qcinit() [L5159] COND TRUE ldv_retval_5 != 0 [L5160] ldv_state_variable_0 = 3 VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, ldvarg0={58:0}, ldvarg1={0:0}, ldvarg2=9, ldvarg3={0:0}, ldvarg4={87:0}, ldvarg5={0:0}, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, tmp={0:0}, tmp___0={0:0}, tmp___1=9, tmp___2={0:0}, tmp___3=1, tmp___5=1, usb_counter=0] [L5252] FCALL ldv_check_final_state() [L5253] CALL ldv_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] [L4381] reach_error() VAL [__mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={0:0}, debug=0, id_table={29:0}, LDV_IN_INTERRUPT=1, ldv_latest_tty={37:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_retval_4=0, ldv_retval_5=2147483648, ldv_retval_6=0, ldv_retval_7=0, ldv_retval_8=0, ldv_retval_9=0, ldv_state_variable_0=3, ldv_state_variable_1=0, ldv_state_variable_2=0, qcdevice={31:0}, qcdevice_group0={0:0}, qcdevice_group1={0:0}, qcdevice_group2={0:0}, qcdriver={30:0}, qcdriver_group1={0:0}, ref_cnt=0, usb_counter=0] - StatisticsResult: Ultimate Automizer benchmark data CFG has 23 procedures, 399 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 14.8s, OverallIterations: 4, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 44 SdHoareTripleChecker+Valid, 0.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 43 mSDsluCounter, 6544 SdHoareTripleChecker+Invalid, 0.2s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 5132 mSDsCounter, 8 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 48 IncrementalHoareTripleChecker+Invalid, 56 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 8 mSolverCounterUnsat, 1412 mSDtfsCounter, 48 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 243 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=397occurred in iteration=0, InterpolantAutomatonStates: 18, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.1s AutomataMinimizationTime, 3 MinimizatonAttempts, 2 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 6.6s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 248 NumberOfCodeBlocks, 248 NumberOfCodeBlocksAsserted, 5 NumberOfCheckSat, 238 ConstructedInterpolants, 0 QuantifiedInterpolants, 302 SizeOfPredicates, 4 NumberOfNonLiveVariables, 5843 ConjunctsInSsa, 14 ConjunctsInUnsatCore, 4 InterpolantComputations, 2 PerfectInterpolantSequences, 66/74 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-12 13:01:25,308 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample