./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 11:48:54,755 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 11:48:54,756 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 11:48:54,792 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 11:48:54,793 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 11:48:54,794 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 11:48:54,795 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 11:48:54,796 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 11:48:54,798 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 11:48:54,801 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 11:48:54,801 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 11:48:54,803 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 11:48:54,803 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 11:48:54,804 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 11:48:54,805 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 11:48:54,808 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 11:48:54,808 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 11:48:54,809 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 11:48:54,810 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 11:48:54,814 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 11:48:54,816 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 11:48:54,816 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 11:48:54,817 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 11:48:54,818 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 11:48:54,819 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 11:48:54,823 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 11:48:54,824 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 11:48:54,824 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 11:48:54,825 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 11:48:54,825 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 11:48:54,826 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 11:48:54,826 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 11:48:54,827 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 11:48:54,828 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 11:48:54,828 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 11:48:54,829 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 11:48:54,830 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 11:48:54,830 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 11:48:54,830 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 11:48:54,830 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 11:48:54,831 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 11:48:54,832 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 11:48:54,833 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-12 11:48:54,856 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 11:48:54,857 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 11:48:54,857 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 11:48:54,857 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 11:48:54,857 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 11:48:54,858 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 11:48:54,858 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 11:48:54,858 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 11:48:54,858 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 11:48:54,859 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 11:48:54,859 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-12 11:48:54,859 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 11:48:54,859 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 11:48:54,859 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 11:48:54,860 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 11:48:54,860 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 11:48:54,860 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 11:48:54,860 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 11:48:54,860 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 11:48:54,861 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 11:48:54,861 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 11:48:54,861 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 11:48:54,862 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 11:48:54,862 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 11:48:54,862 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 11:48:54,862 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-12 11:48:54,862 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-12 11:48:54,862 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 11:48:54,862 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 11:48:54,862 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 11:48:54,863 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 [2022-07-12 11:48:55,040 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 11:48:55,053 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 11:48:55,055 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 11:48:55,055 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 11:48:55,056 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 11:48:55,057 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-12 11:48:55,098 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2c987463e/7adee24eab5446d5b0f33a39f208ff86/FLAGf1dc603c0 [2022-07-12 11:48:55,809 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 11:48:55,810 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-12 11:48:55,845 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2c987463e/7adee24eab5446d5b0f33a39f208ff86/FLAGf1dc603c0 [2022-07-12 11:48:56,145 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2c987463e/7adee24eab5446d5b0f33a39f208ff86 [2022-07-12 11:48:56,147 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 11:48:56,148 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 11:48:56,152 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 11:48:56,153 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 11:48:56,155 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 11:48:56,156 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 11:48:56" (1/1) ... [2022-07-12 11:48:56,156 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@54bdde62 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:56, skipping insertion in model container [2022-07-12 11:48:56,157 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 11:48:56" (1/1) ... [2022-07-12 11:48:56,162 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 11:48:56,255 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 11:48:57,489 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-12 11:48:57,533 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 11:48:57,566 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 11:48:57,828 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-12 11:48:57,832 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 11:48:57,889 INFO L208 MainTranslator]: Completed translation [2022-07-12 11:48:57,891 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57 WrapperNode [2022-07-12 11:48:57,892 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 11:48:57,893 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 11:48:57,893 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 11:48:57,893 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 11:48:57,898 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:57,967 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,059 INFO L137 Inliner]: procedures = 204, calls = 1862, calls flagged for inlining = 100, calls inlined = 66, statements flattened = 3028 [2022-07-12 11:48:58,060 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 11:48:58,061 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 11:48:58,061 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 11:48:58,061 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 11:48:58,102 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,102 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,127 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,128 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,196 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,214 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,233 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,255 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 11:48:58,256 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 11:48:58,256 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 11:48:58,257 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 11:48:58,258 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (1/1) ... [2022-07-12 11:48:58,264 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 11:48:58,275 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 11:48:58,290 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 11:48:58,307 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 11:48:58,327 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2022-07-12 11:48:58,327 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_driver_unregister [2022-07-12 11:48:58,327 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_dev [2022-07-12 11:48:58,327 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_dev [2022-07-12 11:48:58,327 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_dev [2022-07-12 11:48:58,328 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_dev [2022-07-12 11:48:58,328 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-07-12 11:48:58,328 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-07-12 11:48:58,328 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_to_hcd [2022-07-12 11:48:58,328 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_to_hcd [2022-07-12 11:48:58,328 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-12 11:48:58,328 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-12 11:48:58,328 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-12 11:48:58,329 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-12 11:48:58,329 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-12 11:48:58,329 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-12 11:48:58,329 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-07-12 11:48:58,329 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-07-12 11:48:58,329 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_giveback_urb [2022-07-12 11:48:58,329 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_giveback_urb [2022-07-12 11:48:58,329 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-12 11:48:58,330 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-07-12 11:48:58,330 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-07-12 11:48:58,330 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-12 11:48:58,330 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2022-07-12 11:48:58,330 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2022-07-12 11:48:58,330 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-07-12 11:48:58,330 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-07-12 11:48:58,330 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-12 11:48:58,331 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-12 11:48:58,331 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-12 11:48:58,331 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-12 11:48:58,331 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_event_add [2022-07-12 11:48:58,331 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_event_add [2022-07-12 11:48:58,331 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2022-07-12 11:48:58,331 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2022-07-12 11:48:58,331 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-07-12 11:48:58,332 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-07-12 11:48:58,332 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-07-12 11:48:58,332 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-07-12 11:48:58,332 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2022-07-12 11:48:58,332 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2022-07-12 11:48:58,332 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2022-07-12 11:48:58,332 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2022-07-12 11:48:58,332 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2022-07-12 11:48:58,333 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2022-07-12 11:48:58,333 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2022-07-12 11:48:58,333 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2022-07-12 11:48:58,333 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-07-12 11:48:58,333 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-07-12 11:48:58,334 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_unlink_urb_from_ep [2022-07-12 11:48:58,334 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_unlink_urb_from_ep [2022-07-12 11:48:58,334 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2022-07-12 11:48:58,334 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2022-07-12 11:48:58,335 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-12 11:48:58,336 INFO L130 BoogieDeclarations]: Found specification of procedure dump_port_status [2022-07-12 11:48:58,336 INFO L138 BoogieDeclarations]: Found implementation of procedure dump_port_status [2022-07-12 11:48:58,336 INFO L130 BoogieDeclarations]: Found specification of procedure port_to_vdev [2022-07-12 11:48:58,336 INFO L138 BoogieDeclarations]: Found implementation of procedure port_to_vdev [2022-07-12 11:48:58,337 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-12 11:48:58,337 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-12 11:48:58,337 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2022-07-12 11:48:58,337 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2022-07-12 11:48:58,337 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-07-12 11:48:58,338 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2022-07-12 11:48:58,338 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2022-07-12 11:48:58,338 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-12 11:48:58,338 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-12 11:48:58,338 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_dev [2022-07-12 11:48:58,338 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_dev [2022-07-12 11:48:58,338 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-12 11:48:58,338 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_poll_rh_status [2022-07-12 11:48:58,338 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_poll_rh_status [2022-07-12 11:48:58,339 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-12 11:48:58,339 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 11:48:58,339 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-12 11:48:58,339 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-07-12 11:48:58,340 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2022-07-12 11:48:58,340 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2022-07-12 11:48:58,340 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-07-12 11:48:58,340 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-07-12 11:48:58,340 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-12 11:48:58,340 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-12 11:48:58,340 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-07-12 11:48:58,340 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-07-12 11:48:58,341 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_vhci [2022-07-12 11:48:58,341 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_vhci [2022-07-12 11:48:58,341 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_add_return [2022-07-12 11:48:58,341 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_add_return [2022-07-12 11:48:58,341 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2022-07-12 11:48:58,342 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2022-07-12 11:48:58,342 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_put_dev [2022-07-12 11:48:58,342 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_put_dev [2022-07-12 11:48:58,342 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_dev [2022-07-12 11:48:58,342 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_dev [2022-07-12 11:48:58,342 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2022-07-12 11:48:58,343 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2022-07-12 11:48:58,343 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-07-12 11:48:58,343 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-07-12 11:48:58,343 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-12 11:48:58,344 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2022-07-12 11:48:58,344 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2022-07-12 11:48:58,344 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_task_init [2022-07-12 11:48:58,344 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_task_init [2022-07-12 11:48:58,344 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 11:48:58,344 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 11:48:58,764 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 11:48:58,766 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 11:49:00,415 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 11:49:00,425 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 11:49:00,426 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-12 11:49:00,428 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 11:49:00 BoogieIcfgContainer [2022-07-12 11:49:00,428 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 11:49:00,429 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 11:49:00,429 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 11:49:00,432 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 11:49:00,432 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 11:48:56" (1/3) ... [2022-07-12 11:49:00,432 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@16d71325 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 11:49:00, skipping insertion in model container [2022-07-12 11:49:00,433 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:48:57" (2/3) ... [2022-07-12 11:49:00,433 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@16d71325 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 11:49:00, skipping insertion in model container [2022-07-12 11:49:00,433 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 11:49:00" (3/3) ... [2022-07-12 11:49:00,434 INFO L111 eAbstractionObserver]: Analyzing ICFG main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-12 11:49:00,444 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 11:49:00,444 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 11:49:00,512 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 11:49:00,517 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@21bcfb14, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@dcb80b5 [2022-07-12 11:49:00,517 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 11:49:00,523 INFO L276 IsEmpty]: Start isEmpty. Operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) [2022-07-12 11:49:00,540 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-12 11:49:00,540 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:00,541 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:00,542 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:00,547 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:00,548 INFO L85 PathProgramCache]: Analyzing trace with hash 1287876963, now seen corresponding path program 1 times [2022-07-12 11:49:00,555 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 11:49:00,556 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [644370918] [2022-07-12 11:49:00,556 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:00,557 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 11:49:00,851 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:00,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 11:49:00,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:00,983 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-12 11:49:00,985 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:00,990 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 11:49:00,990 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 11:49:00,991 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [644370918] [2022-07-12 11:49:00,991 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [644370918] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 11:49:00,991 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 11:49:00,991 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-12 11:49:00,992 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1214781353] [2022-07-12 11:49:00,993 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 11:49:00,996 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 11:49:00,996 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 11:49:01,012 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 11:49:01,013 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 11:49:01,016 INFO L87 Difference]: Start difference. First operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 11:49:01,147 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 11:49:01,148 INFO L93 Difference]: Finished difference Result 2459 states and 3506 transitions. [2022-07-12 11:49:01,149 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 11:49:01,150 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 19 [2022-07-12 11:49:01,151 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 11:49:01,168 INFO L225 Difference]: With dead ends: 2459 [2022-07-12 11:49:01,169 INFO L226 Difference]: Without dead ends: 1570 [2022-07-12 11:49:01,178 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 11:49:01,181 INFO L413 NwaCegarLoop]: 1360 mSDtfsCounter, 1127 mSDsluCounter, 1096 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1127 SdHoareTripleChecker+Valid, 2456 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 11:49:01,182 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1127 Valid, 2456 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 11:49:01,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2022-07-12 11:49:01,315 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 1567. [2022-07-12 11:49:01,318 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.306787330316742) internal successors, (1444), 1117 states have internal predecessors, (1444), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-12 11:49:01,328 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2198 transitions. [2022-07-12 11:49:01,330 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2198 transitions. Word has length 19 [2022-07-12 11:49:01,330 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 11:49:01,330 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2198 transitions. [2022-07-12 11:49:01,331 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 11:49:01,331 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2198 transitions. [2022-07-12 11:49:01,340 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-12 11:49:01,340 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:01,341 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:01,341 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-12 11:49:01,341 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:01,342 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:01,342 INFO L85 PathProgramCache]: Analyzing trace with hash -619409099, now seen corresponding path program 1 times [2022-07-12 11:49:01,342 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 11:49:01,342 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [412159663] [2022-07-12 11:49:01,342 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:01,343 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 11:49:01,441 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 11:49:01,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-12 11:49:01,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-12 11:49:01,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-12 11:49:01,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,579 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-12 11:49:01,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-12 11:49:01,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-12 11:49:01,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-12 11:49:01,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:01,613 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-07-12 11:49:01,614 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 11:49:01,614 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [412159663] [2022-07-12 11:49:01,615 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [412159663] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 11:49:01,615 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 11:49:01,615 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 11:49:01,615 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1791664915] [2022-07-12 11:49:01,615 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 11:49:01,617 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 11:49:01,617 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 11:49:01,618 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 11:49:01,618 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-12 11:49:01,618 INFO L87 Difference]: Start difference. First operand 1567 states and 2198 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:01,710 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 11:49:01,710 INFO L93 Difference]: Finished difference Result 3093 states and 4339 transitions. [2022-07-12 11:49:01,711 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-12 11:49:01,711 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2022-07-12 11:49:01,711 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 11:49:01,721 INFO L225 Difference]: With dead ends: 3093 [2022-07-12 11:49:01,721 INFO L226 Difference]: Without dead ends: 1567 [2022-07-12 11:49:01,729 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-12 11:49:01,730 INFO L413 NwaCegarLoop]: 1156 mSDtfsCounter, 1 mSDsluCounter, 2306 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 3462 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 11:49:01,731 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 3462 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 11:49:01,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1567 states. [2022-07-12 11:49:01,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1567 to 1567. [2022-07-12 11:49:01,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.3058823529411765) internal successors, (1443), 1117 states have internal predecessors, (1443), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-12 11:49:01,795 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2197 transitions. [2022-07-12 11:49:01,796 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2197 transitions. Word has length 63 [2022-07-12 11:49:01,796 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 11:49:01,797 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2197 transitions. [2022-07-12 11:49:01,797 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:01,797 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2197 transitions. [2022-07-12 11:49:01,805 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-07-12 11:49:01,806 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:01,806 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:01,806 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-12 11:49:01,807 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:01,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:01,807 INFO L85 PathProgramCache]: Analyzing trace with hash 1833716892, now seen corresponding path program 1 times [2022-07-12 11:49:01,808 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 11:49:01,808 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [171358454] [2022-07-12 11:49:01,808 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:01,808 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 11:49:01,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-12 11:49:02,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,067 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-12 11:49:02,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-12 11:49:02,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-12 11:49:02,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-12 11:49:02,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-12 11:49:02,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-12 11:49:02,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-07-12 11:49:02,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:02,124 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-07-12 11:49:02,124 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-12 11:49:02,124 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [171358454] [2022-07-12 11:49:02,124 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [171358454] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 11:49:02,125 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 11:49:02,125 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 11:49:02,125 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1251575469] [2022-07-12 11:49:02,126 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 11:49:02,126 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 11:49:02,126 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-12 11:49:02,127 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 11:49:02,127 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 11:49:02,127 INFO L87 Difference]: Start difference. First operand 1567 states and 2197 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:02,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 11:49:02,206 INFO L93 Difference]: Finished difference Result 3093 states and 4338 transitions. [2022-07-12 11:49:02,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 11:49:02,207 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 67 [2022-07-12 11:49:02,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 11:49:02,213 INFO L225 Difference]: With dead ends: 3093 [2022-07-12 11:49:02,214 INFO L226 Difference]: Without dead ends: 1555 [2022-07-12 11:49:02,222 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 11:49:02,223 INFO L413 NwaCegarLoop]: 1154 mSDtfsCounter, 9 mSDsluCounter, 3441 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 4595 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 11:49:02,224 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 4595 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 11:49:02,226 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1555 states. [2022-07-12 11:49:02,256 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1555 to 1555. [2022-07-12 11:49:02,259 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1555 states, 1097 states have (on average 1.3044667274384685) internal successors, (1431), 1108 states have internal predecessors, (1431), 376 states have call successors, (376), 84 states have call predecessors, (376), 81 states have return successors, (372), 368 states have call predecessors, (372), 370 states have call successors, (372) [2022-07-12 11:49:02,266 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1555 states to 1555 states and 2179 transitions. [2022-07-12 11:49:02,267 INFO L78 Accepts]: Start accepts. Automaton has 1555 states and 2179 transitions. Word has length 67 [2022-07-12 11:49:02,267 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 11:49:02,267 INFO L495 AbstractCegarLoop]: Abstraction has 1555 states and 2179 transitions. [2022-07-12 11:49:02,267 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:02,268 INFO L276 IsEmpty]: Start isEmpty. Operand 1555 states and 2179 transitions. [2022-07-12 11:49:02,270 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-12 11:49:02,270 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:02,270 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:02,271 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-12 11:49:02,271 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:02,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:02,271 INFO L85 PathProgramCache]: Analyzing trace with hash 688026883, now seen corresponding path program 1 times [2022-07-12 11:49:02,271 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-12 11:49:02,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [270049913] [2022-07-12 11:49:02,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:02,272 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-12 11:49:02,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 11:49:02,747 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-12 11:49:03,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 11:49:03,190 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-12 11:49:03,190 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-12 11:49:03,191 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 11:49:03,192 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-12 11:49:03,195 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-07-12 11:49:03,197 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 11:49:03,292 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 11:49:03 BoogieIcfgContainer [2022-07-12 11:49:03,293 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 11:49:03,293 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 11:49:03,293 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 11:49:03,293 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 11:49:03,294 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 11:49:00" (3/4) ... [2022-07-12 11:49:03,296 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-12 11:49:03,296 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 11:49:03,297 INFO L158 Benchmark]: Toolchain (without parser) took 7148.35ms. Allocated memory was 159.4MB in the beginning and 438.3MB in the end (delta: 278.9MB). Free memory was 117.2MB in the beginning and 261.6MB in the end (delta: -144.4MB). Peak memory consumption was 134.8MB. Max. memory is 16.1GB. [2022-07-12 11:49:03,297 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 96.5MB. Free memory is still 52.0MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 11:49:03,297 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1739.74ms. Allocated memory is still 159.4MB. Free memory was 116.9MB in the beginning and 78.5MB in the end (delta: 38.4MB). Peak memory consumption was 79.1MB. Max. memory is 16.1GB. [2022-07-12 11:49:03,298 INFO L158 Benchmark]: Boogie Procedure Inliner took 167.35ms. Allocated memory is still 159.4MB. Free memory was 78.5MB in the beginning and 60.4MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-12 11:49:03,298 INFO L158 Benchmark]: Boogie Preprocessor took 194.65ms. Allocated memory was 159.4MB in the beginning and 306.2MB in the end (delta: 146.8MB). Free memory was 60.4MB in the beginning and 227.9MB in the end (delta: -167.5MB). Peak memory consumption was 12.9MB. Max. memory is 16.1GB. [2022-07-12 11:49:03,298 INFO L158 Benchmark]: RCFGBuilder took 2171.97ms. Allocated memory is still 306.2MB. Free memory was 227.9MB in the beginning and 199.3MB in the end (delta: 28.5MB). Peak memory consumption was 114.8MB. Max. memory is 16.1GB. [2022-07-12 11:49:03,298 INFO L158 Benchmark]: TraceAbstraction took 2863.33ms. Allocated memory was 306.2MB in the beginning and 438.3MB in the end (delta: 132.1MB). Free memory was 199.3MB in the beginning and 262.7MB in the end (delta: -63.3MB). Peak memory consumption was 226.1MB. Max. memory is 16.1GB. [2022-07-12 11:49:03,299 INFO L158 Benchmark]: Witness Printer took 3.27ms. Allocated memory is still 438.3MB. Free memory was 262.7MB in the beginning and 261.6MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2022-07-12 11:49:03,300 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 96.5MB. Free memory is still 52.0MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1739.74ms. Allocated memory is still 159.4MB. Free memory was 116.9MB in the beginning and 78.5MB in the end (delta: 38.4MB). Peak memory consumption was 79.1MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 167.35ms. Allocated memory is still 159.4MB. Free memory was 78.5MB in the beginning and 60.4MB in the end (delta: 18.1MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 194.65ms. Allocated memory was 159.4MB in the beginning and 306.2MB in the end (delta: 146.8MB). Free memory was 60.4MB in the beginning and 227.9MB in the end (delta: -167.5MB). Peak memory consumption was 12.9MB. Max. memory is 16.1GB. * RCFGBuilder took 2171.97ms. Allocated memory is still 306.2MB. Free memory was 227.9MB in the beginning and 199.3MB in the end (delta: 28.5MB). Peak memory consumption was 114.8MB. Max. memory is 16.1GB. * TraceAbstraction took 2863.33ms. Allocated memory was 306.2MB in the beginning and 438.3MB in the end (delta: 132.1MB). Free memory was 199.3MB in the beginning and 262.7MB in the end (delta: -63.3MB). Peak memory consumption was 226.1MB. Max. memory is 16.1GB. * Witness Printer took 3.27ms. Allocated memory is still 438.3MB. Free memory was 262.7MB in the beginning and 261.6MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8157]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6448, overapproximation of bitwiseAnd at line 7146. Possible FailurePath: [L4883-L4884] static struct device_attribute dev_attr_status = {{"status", 292U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, & show_status, 0}; [L4978-L4979] static struct device_attribute dev_attr_detach = {{"detach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_detach}; [L5100-L5101] static struct device_attribute dev_attr_attach = {{"attach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_attach}; [L5102-L5103] static struct attribute *dev_attrs[5U] = { & dev_attr_status.attr, & dev_attr_detach.attr, & dev_attr_attach.attr, & dev_attr_usbip_debug.attr, 0}; [L5104] struct attribute_group dev_attr_group = {0, 0, (struct attribute **)(& dev_attrs)}; [L5108] int LDV_IN_INTERRUPT ; [L6410] struct vhci_hcd *the_controller ; [L6434-L6437] static char const driver_name[9U] = { 'v', 'h', 'c', 'i', '_', 'h', 'c', 'd', '\000'}; [L6438-L6446] static char const driver_desc[31U] = { 'U', 'S', 'B', '/', 'I', 'P', ' ', 'V', 'i', 'r', 't', 'u', 'a', 'l', ' ', 'H', 'o', 's', 't', ' ', 'C', 'o', 'n', 't', 'r', 'o', 'l', 'l', 'e', 'r', '\000'}; [L6447-L6455] static char const *bit_desc[32U] = { "CONNECTION", "ENABLE", "SUSPEND", "OVER_CURRENT", "RESET", "R5", "R6", "R7", "POWER", "LOWSPEED", "HIGHSPEED", "PORT_TEST", "INDICATOR", "R13", "R14", "R15", "C_CONNECTION", "C_ENABLE", "C_SUSPEND", "C_OVER_CURRENT", "C_RESET", "R21", "R22", "R23", "R24", "R25", "R26", "R27", "R28", "R29", "R30", "R31"}; [L7632-L7636] static struct hc_driver vhci_hc_driver = {(char const *)(& driver_name), (char const *)(& driver_desc), 6664UL, 0, 32, 0, & vhci_start, 0, 0, & vhci_stop, 0, & vhci_get_frame_number, & vhci_urb_enqueue, & vhci_urb_dequeue, 0, 0, & vhci_hub_status, & vhci_hub_control, & vhci_bus_suspend, & vhci_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7792-L7794] static struct platform_driver vhci_driver = {& vhci_hcd_probe, & vhci_hcd_remove, 0, & vhci_hcd_suspend, & vhci_hcd_resume, {(char const *)(& driver_name), 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L7801-L7857] static struct platform_device the_pdev = {(char const *)(& driver_name), -1, {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, 0, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, 0, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL}, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0, 0}, 0U, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, & the_pdev_release}, 0U, 0, 0, {}}; [L8202] int ldv_usb_dev_state = 0; VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7974] struct usb_hcd *var_group1 ; [L7975] struct urb *var_group2 ; [L7976] gfp_t var_vhci_urb_enqueue_8_p2 ; [L7977] int var_vhci_urb_dequeue_9_p2 ; [L7978] char *var_vhci_hub_status_3_p1 ; [L7979] u16 var_vhci_hub_control_5_p1 ; [L7980] u16 var_vhci_hub_control_5_p2 ; [L7981] u16 var_vhci_hub_control_5_p3 ; [L7982] char *var_vhci_hub_control_5_p4 ; [L7983] u16 var_vhci_hub_control_5_p5 ; [L7984] struct platform_device *var_group3 ; [L7985] int res_vhci_hcd_probe_20 ; [L7986] pm_message_t var_vhci_hcd_suspend_22_p1 ; [L7987] struct device *var_group4 ; [L7988] int ldv_s_vhci_driver_platform_driver ; [L7989] int ldv_s_the_pdev_platform_device ; [L7990] int tmp ; [L7991] int tmp___0 ; [L7992] int tmp___1 ; [L7994] ldv_s_vhci_driver_platform_driver = 0 [L7995] ldv_s_the_pdev_platform_device = 0 [L7996] LDV_IN_INTERRUPT = 1 VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7997] FCALL ldv_initialize() VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7998] FCALL ldv_handler_precall() VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] CALL, EXPR vhci_init() [L7860] int ret ; [L7861] struct task_struct *tmp___0 ; [L7862] char *tmp___1 ; [L7863] struct thread_info *tmp___2 ; [L7864] int tmp___3 ; [L7865] struct task_struct *tmp___5 ; [L7866] char *tmp___6 ; [L7867] struct thread_info *tmp___7 ; [L7868] struct task_struct *tmp___9 ; [L7869] char *tmp___10 ; [L7870] struct thread_info *tmp___11 ; VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7872] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7884] CALL, EXPR usb_disabled() [L8396] return __VERIFIER_nondet_int(); [L7884] RET, EXPR usb_disabled() [L7884] tmp___3 = usb_disabled() [L7885] COND FALSE !(tmp___3 != 0) [L7890] CALL, EXPR platform_driver_register(& vhci_driver) [L8359] return __VERIFIER_nondet_int(); [L7890] RET, EXPR platform_driver_register(& vhci_driver) [L7890] ret = platform_driver_register(& vhci_driver) [L7891] COND FALSE !(ret < 0) [L7895] CALL, EXPR platform_device_register(& the_pdev) [L8352] return __VERIFIER_nondet_int(); [L7895] RET, EXPR platform_device_register(& the_pdev) [L7895] ret = platform_device_register(& the_pdev) [L7896] COND FALSE !(ret < 0) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7900] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7912] return (ret); VAL [\result=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] RET, EXPR vhci_init() [L7999] tmp = vhci_init() [L8000] COND FALSE !(tmp != 0) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8095] tmp___1 = __VERIFIER_nondet_int() [L8096] COND TRUE (tmp___1 != 0 || ldv_s_vhci_driver_platform_driver != 0) || ldv_s_the_pdev_platform_device != 0 VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___1=-2, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8006] tmp___0 = __VERIFIER_nondet_int() [L8008] case 0: [L8012] case 1: [L8016] case 2: VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=-2, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8017] FCALL ldv_handler_precall() VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=-2, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8018] CALL vhci_urb_enqueue(var_group1, var_group2, var_vhci_urb_enqueue_8_p2) [L7087] struct device *dev ; [L7088] int ret ; [L7089] unsigned long flags ; [L7090] struct task_struct *tmp___0 ; [L7091] char *tmp___1 ; [L7092] struct thread_info *tmp___2 ; [L7093] long tmp___3 ; [L7094] long tmp___4 ; [L7095] raw_spinlock_t *tmp___5 ; [L7096] __u8 type ; [L7097] struct usb_ctrlrequest *ctrlreq ; [L7098] struct vhci_device *vdev ; [L7099] struct vhci_device *tmp___6 ; [L7100] struct task_struct *tmp___8 ; [L7101] char *tmp___9 ; [L7102] struct thread_info *tmp___10 ; [L7103] struct usb_hcd *tmp___11 ; [L7105] EXPR urb->dev [L7105] dev = & (urb->dev)->dev [L7106] ret = 0 VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7107] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120] EXPR urb->transfer_buffer VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, urb->transfer_buffer={377:-376}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] CALL, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(c)=0, \old(exp)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8163] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, c=0, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, exp=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] RET, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L)=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, urb->transfer_buffer={377:-376}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] tmp___3 = ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) [L7122] COND FALSE !(tmp___3 != 0L) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] CALL, EXPR spinlock_check(& the_controller->lock) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L5188] return (& lock->ldv_5812.rlock); VAL [\result={0:0}, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] RET, EXPR spinlock_check(& the_controller->lock) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, spinlock_check(& the_controller->lock)={0:0}, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] tmp___5 = spinlock_check(& the_controller->lock) [L7134] CALL, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [__this_module={4294967298:4294967306}, arg0={0:0}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8294] return __VERIFIER_nondet_ulong(); [L7134] RET, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, _raw_spin_lock_irqsave(tmp___5)=4294967305, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7134] flags = _raw_spin_lock_irqsave(tmp___5) [L7135] EXPR urb->status VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={4294967308:0}, urb={4294967308:0}, urb->status=-115, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7135] COND FALSE !(urb->status != -115) [L7141] CALL, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L8410] return __VERIFIER_nondet_int(); [L7141] RET, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L7141] ret = usb_hcd_link_urb_to_ep(hcd, urb) [L7142] COND FALSE !(ret != 0) [L7146] EXPR urb->pipe VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={4294967308:0}, urb={4294967308:0}, urb->pipe=-271656681473, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7146] COND TRUE ((urb->pipe >> 8) & 127U) == 0U [L7147] EXPR urb->pipe [L7147] type = (__u8 )(urb->pipe >> 30) [L7148] EXPR urb->setup_packet [L7148] ctrlreq = (struct usb_ctrlrequest *)urb->setup_packet [L7149] EXPR the_controller->pending_port VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_controller->pending_port=4294967297, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] CALL, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(port)=1, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L4809] return ((struct vhci_device *)(& the_controller->vdev) + (unsigned long )port); VAL [\old(port)=1, \result={0:853}, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, port=1, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] RET, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, port_to_vdev((__u32 )the_controller->pending_port)={0:853}, ret=0, the_controller={0:0}, the_controller->pending_port=4294967297, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] tmp___6 = port_to_vdev((__u32 )the_controller->pending_port) [L7150] vdev = tmp___6 VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:853}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vdev={0:853}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7151] COND FALSE !((unsigned int )type != 2U || (unsigned long )ctrlreq == (unsigned long )((struct usb_ctrlrequest *)0)) [L7157] ctrlreq->bRequest [L7158] case 5: [L7160] ctrlreq->wValue [L7160] vdev->rhport [L7161] EXPR vdev->udev VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, ctrlreq->bRequest=-251, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:853}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vdev={0:853}, vdev->udev={-377:378}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7161] COND TRUE (unsigned long )vdev->udev != (unsigned long )((struct usb_device *)0) [L7162] EXPR vdev->udev [L7162] CALL ldv_usb_put_dev_21(vdev->udev) [L8111] FCALL usb_put_dev(ldv_func_arg1) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, ldv_func_arg1={-377:378}, ldv_func_arg1={-377:378}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8112] CALL ldv_usb_put_dev() VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8227] COND FALSE !(ldv_usb_dev_state >= 2) VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8229] CALL ldv_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8157] reach_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 47 procedures, 893 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 2.7s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1140 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1137 mSDsluCounter, 10513 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6843 mSDsCounter, 7 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 40 IncrementalHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 7 mSolverCounterUnsat, 3670 mSDtfsCounter, 40 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 50 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1567occurred in iteration=1, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 3 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.0s SsaConstructionTime, 0.8s SatisfiabilityAnalysisTime, 0.5s InterpolantComputationTime, 218 NumberOfCodeBlocks, 218 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 146 ConstructedInterpolants, 0 QuantifiedInterpolants, 194 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 4/4 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-12 11:49:03,350 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-12 11:49:05,160 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-12 11:49:05,161 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-12 11:49:05,203 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-12 11:49:05,204 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-12 11:49:05,205 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-12 11:49:05,208 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-12 11:49:05,211 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-12 11:49:05,212 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-12 11:49:05,217 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-12 11:49:05,218 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-12 11:49:05,221 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-12 11:49:05,222 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-12 11:49:05,223 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-12 11:49:05,225 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-12 11:49:05,227 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-12 11:49:05,228 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-12 11:49:05,230 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-12 11:49:05,231 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-12 11:49:05,234 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-12 11:49:05,236 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-12 11:49:05,236 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-12 11:49:05,238 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-12 11:49:05,239 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-12 11:49:05,240 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-12 11:49:05,243 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-12 11:49:05,243 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-12 11:49:05,244 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-12 11:49:05,244 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-12 11:49:05,245 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-12 11:49:05,245 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-12 11:49:05,246 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-12 11:49:05,247 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-12 11:49:05,248 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-12 11:49:05,249 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-12 11:49:05,249 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-12 11:49:05,249 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-12 11:49:05,250 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-12 11:49:05,250 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-12 11:49:05,250 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-12 11:49:05,251 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-12 11:49:05,252 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-12 11:49:05,255 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-07-12 11:49:05,282 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-12 11:49:05,282 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-12 11:49:05,283 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-12 11:49:05,283 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-12 11:49:05,284 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-12 11:49:05,284 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-12 11:49:05,284 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-12 11:49:05,284 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-12 11:49:05,285 INFO L138 SettingsManager]: * Use SBE=true [2022-07-12 11:49:05,285 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-12 11:49:05,286 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-12 11:49:05,286 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-12 11:49:05,286 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-12 11:49:05,286 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-12 11:49:05,286 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-07-12 11:49:05,286 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-07-12 11:49:05,286 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-07-12 11:49:05,287 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-12 11:49:05,287 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-12 11:49:05,287 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-12 11:49:05,287 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-12 11:49:05,287 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-12 11:49:05,287 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-12 11:49:05,287 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 11:49:05,288 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-12 11:49:05,288 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-12 11:49:05,288 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-12 11:49:05,288 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-07-12 11:49:05,288 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-07-12 11:49:05,288 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-12 11:49:05,289 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-12 11:49:05,289 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-12 11:49:05,289 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-07-12 11:49:05,289 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 [2022-07-12 11:49:05,562 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-12 11:49:05,584 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-12 11:49:05,586 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-12 11:49:05,587 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-12 11:49:05,588 INFO L275 PluginConnector]: CDTParser initialized [2022-07-12 11:49:05,589 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-12 11:49:05,646 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/27f764593/54b1a6a1793d4b5592383d58f93f7be1/FLAG602c9fc0d [2022-07-12 11:49:06,318 INFO L306 CDTParser]: Found 1 translation units. [2022-07-12 11:49:06,319 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-12 11:49:06,355 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/27f764593/54b1a6a1793d4b5592383d58f93f7be1/FLAG602c9fc0d [2022-07-12 11:49:06,665 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/27f764593/54b1a6a1793d4b5592383d58f93f7be1 [2022-07-12 11:49:06,667 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-12 11:49:06,669 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-12 11:49:06,671 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-12 11:49:06,671 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-12 11:49:06,674 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-12 11:49:06,674 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 11:49:06" (1/1) ... [2022-07-12 11:49:06,675 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@2db5e290 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:06, skipping insertion in model container [2022-07-12 11:49:06,675 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 12.07 11:49:06" (1/1) ... [2022-07-12 11:49:06,680 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-12 11:49:06,794 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 11:49:08,183 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-12 11:49:08,211 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 11:49:08,253 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-07-12 11:49:08,300 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-12 11:49:08,555 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-12 11:49:08,564 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 11:49:08,580 INFO L203 MainTranslator]: Completed pre-run [2022-07-12 11:49:08,809 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-12 11:49:08,816 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-12 11:49:08,907 INFO L208 MainTranslator]: Completed translation [2022-07-12 11:49:08,907 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08 WrapperNode [2022-07-12 11:49:08,908 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-12 11:49:08,909 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-12 11:49:08,909 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-12 11:49:08,909 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-12 11:49:08,914 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:08,996 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,086 INFO L137 Inliner]: procedures = 218, calls = 1862, calls flagged for inlining = 100, calls inlined = 66, statements flattened = 2985 [2022-07-12 11:49:09,086 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-12 11:49:09,087 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-12 11:49:09,087 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-12 11:49:09,087 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-12 11:49:09,094 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,094 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,108 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,108 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,153 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,163 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,185 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,214 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-12 11:49:09,217 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-12 11:49:09,218 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-12 11:49:09,218 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-12 11:49:09,219 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (1/1) ... [2022-07-12 11:49:09,225 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-12 11:49:09,233 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-12 11:49:09,262 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-12 11:49:09,269 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-12 11:49:09,303 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-07-12 11:49:09,303 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2022-07-12 11:49:09,304 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_driver_unregister [2022-07-12 11:49:09,304 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-07-12 11:49:09,304 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-07-12 11:49:09,304 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-07-12 11:49:09,304 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_dev [2022-07-12 11:49:09,304 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_dev [2022-07-12 11:49:09,304 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_dev [2022-07-12 11:49:09,304 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_dev [2022-07-12 11:49:09,304 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-07-12 11:49:09,305 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-07-12 11:49:09,305 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_to_hcd [2022-07-12 11:49:09,305 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_to_hcd [2022-07-12 11:49:09,305 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-12 11:49:09,305 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-12 11:49:09,305 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-12 11:49:09,305 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-12 11:49:09,305 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-12 11:49:09,305 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-12 11:49:09,306 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-07-12 11:49:09,306 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-07-12 11:49:09,306 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_giveback_urb [2022-07-12 11:49:09,306 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_giveback_urb [2022-07-12 11:49:09,306 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-12 11:49:09,306 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-07-12 11:49:09,306 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-07-12 11:49:09,306 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-12 11:49:09,307 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2022-07-12 11:49:09,307 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2022-07-12 11:49:09,307 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-07-12 11:49:09,307 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-07-12 11:49:09,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-07-12 11:49:09,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-07-12 11:49:09,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-07-12 11:49:09,308 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-12 11:49:09,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-07-12 11:49:09,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-12 11:49:09,309 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-12 11:49:09,309 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-12 11:49:09,309 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_event_add [2022-07-12 11:49:09,309 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_event_add [2022-07-12 11:49:09,309 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-07-12 11:49:09,309 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-07-12 11:49:09,310 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-07-12 11:49:09,310 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2022-07-12 11:49:09,310 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2022-07-12 11:49:09,310 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-07-12 11:49:09,311 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-07-12 11:49:09,311 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-07-12 11:49:09,311 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-07-12 11:49:09,312 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2022-07-12 11:49:09,312 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2022-07-12 11:49:09,312 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2022-07-12 11:49:09,313 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2022-07-12 11:49:09,313 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2022-07-12 11:49:09,313 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2022-07-12 11:49:09,313 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2022-07-12 11:49:09,313 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2022-07-12 11:49:09,313 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-07-12 11:49:09,313 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-07-12 11:49:09,314 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_unlink_urb_from_ep [2022-07-12 11:49:09,314 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_unlink_urb_from_ep [2022-07-12 11:49:09,314 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2022-07-12 11:49:09,314 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2022-07-12 11:49:09,314 INFO L130 BoogieDeclarations]: Found specification of procedure dump_port_status [2022-07-12 11:49:09,314 INFO L138 BoogieDeclarations]: Found implementation of procedure dump_port_status [2022-07-12 11:49:09,315 INFO L130 BoogieDeclarations]: Found specification of procedure port_to_vdev [2022-07-12 11:49:09,315 INFO L138 BoogieDeclarations]: Found implementation of procedure port_to_vdev [2022-07-12 11:49:09,315 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-12 11:49:09,315 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-12 11:49:09,315 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2022-07-12 11:49:09,315 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2022-07-12 11:49:09,315 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2022-07-12 11:49:09,315 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2022-07-12 11:49:09,316 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-12 11:49:09,316 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-12 11:49:09,316 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_dev [2022-07-12 11:49:09,316 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_dev [2022-07-12 11:49:09,316 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-12 11:49:09,316 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_poll_rh_status [2022-07-12 11:49:09,316 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_poll_rh_status [2022-07-12 11:49:09,317 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-12 11:49:09,317 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-12 11:49:09,317 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-12 11:49:09,317 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-07-12 11:49:09,317 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2022-07-12 11:49:09,317 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2022-07-12 11:49:09,318 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-07-12 11:49:09,318 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-07-12 11:49:09,318 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-12 11:49:09,318 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-12 11:49:09,319 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-07-12 11:49:09,319 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-07-12 11:49:09,319 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_vhci [2022-07-12 11:49:09,319 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_vhci [2022-07-12 11:49:09,319 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_add_return [2022-07-12 11:49:09,319 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_add_return [2022-07-12 11:49:09,319 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2022-07-12 11:49:09,319 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2022-07-12 11:49:09,319 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_put_dev [2022-07-12 11:49:09,319 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_put_dev [2022-07-12 11:49:09,320 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_dev [2022-07-12 11:49:09,320 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_dev [2022-07-12 11:49:09,320 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2022-07-12 11:49:09,320 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2022-07-12 11:49:09,320 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-07-12 11:49:09,320 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-07-12 11:49:09,320 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2022-07-12 11:49:09,321 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2022-07-12 11:49:09,321 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_task_init [2022-07-12 11:49:09,322 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_task_init [2022-07-12 11:49:09,323 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-12 11:49:09,324 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-12 11:49:09,758 INFO L234 CfgBuilder]: Building ICFG [2022-07-12 11:49:09,768 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-12 11:49:20,378 INFO L275 CfgBuilder]: Performing block encoding [2022-07-12 11:49:20,391 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-12 11:49:20,392 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-12 11:49:20,394 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 11:49:20 BoogieIcfgContainer [2022-07-12 11:49:20,394 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-12 11:49:20,396 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-12 11:49:20,396 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-12 11:49:20,398 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-12 11:49:20,398 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 12.07 11:49:06" (1/3) ... [2022-07-12 11:49:20,399 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6231615d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 11:49:20, skipping insertion in model container [2022-07-12 11:49:20,399 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 12.07 11:49:08" (2/3) ... [2022-07-12 11:49:20,399 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6231615d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 12.07 11:49:20, skipping insertion in model container [2022-07-12 11:49:20,399 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 11:49:20" (3/3) ... [2022-07-12 11:49:20,401 INFO L111 eAbstractionObserver]: Analyzing ICFG main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-12 11:49:20,411 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-12 11:49:20,412 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-12 11:49:20,478 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-12 11:49:20,483 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@4864b962, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@5eca8fe4 [2022-07-12 11:49:20,483 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-12 11:49:20,492 INFO L276 IsEmpty]: Start isEmpty. Operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) [2022-07-12 11:49:20,498 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-12 11:49:20,498 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:20,499 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:20,499 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:20,505 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:20,505 INFO L85 PathProgramCache]: Analyzing trace with hash 1287876963, now seen corresponding path program 1 times [2022-07-12 11:49:20,518 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 11:49:20,518 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2136790758] [2022-07-12 11:49:20,518 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:20,519 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 11:49:20,519 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 11:49:20,530 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 11:49:20,534 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-07-12 11:49:21,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:21,431 INFO L263 TraceCheckSpWp]: Trace formula consists of 1795 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-12 11:49:21,436 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 11:49:21,551 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 11:49:21,552 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 11:49:21,552 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 11:49:21,553 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2136790758] [2022-07-12 11:49:21,553 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2136790758] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 11:49:21,553 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 11:49:21,553 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-12 11:49:21,554 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [544098115] [2022-07-12 11:49:21,555 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 11:49:21,558 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-12 11:49:21,559 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 11:49:21,576 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-12 11:49:21,577 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 11:49:21,580 INFO L87 Difference]: Start difference. First operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 11:49:21,745 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 11:49:21,745 INFO L93 Difference]: Finished difference Result 2459 states and 3506 transitions. [2022-07-12 11:49:21,747 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-12 11:49:21,748 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 19 [2022-07-12 11:49:21,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 11:49:21,764 INFO L225 Difference]: With dead ends: 2459 [2022-07-12 11:49:21,764 INFO L226 Difference]: Without dead ends: 1570 [2022-07-12 11:49:21,774 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-12 11:49:21,776 INFO L413 NwaCegarLoop]: 1360 mSDtfsCounter, 1123 mSDsluCounter, 1096 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1123 SdHoareTripleChecker+Valid, 2456 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 11:49:21,777 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1123 Valid, 2456 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 11:49:21,790 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2022-07-12 11:49:21,895 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 1567. [2022-07-12 11:49:21,899 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.306787330316742) internal successors, (1444), 1117 states have internal predecessors, (1444), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-12 11:49:21,909 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2198 transitions. [2022-07-12 11:49:21,912 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2198 transitions. Word has length 19 [2022-07-12 11:49:21,912 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 11:49:21,912 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2198 transitions. [2022-07-12 11:49:21,912 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-12 11:49:21,912 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2198 transitions. [2022-07-12 11:49:21,922 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-12 11:49:21,923 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:21,923 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:21,946 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-07-12 11:49:22,145 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 11:49:22,146 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:22,147 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:22,148 INFO L85 PathProgramCache]: Analyzing trace with hash -619409099, now seen corresponding path program 1 times [2022-07-12 11:49:22,150 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 11:49:22,150 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1070443387] [2022-07-12 11:49:22,150 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:22,150 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 11:49:22,150 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 11:49:22,152 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 11:49:22,179 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-07-12 11:49:23,051 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:23,102 INFO L263 TraceCheckSpWp]: Trace formula consists of 1912 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-12 11:49:23,105 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 11:49:23,131 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 11:49:23,131 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 11:49:23,131 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 11:49:23,131 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1070443387] [2022-07-12 11:49:23,131 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1070443387] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 11:49:23,132 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 11:49:23,132 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-12 11:49:23,132 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1403977751] [2022-07-12 11:49:23,132 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 11:49:23,133 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-12 11:49:23,133 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 11:49:23,133 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-12 11:49:23,133 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-12 11:49:23,134 INFO L87 Difference]: Start difference. First operand 1567 states and 2198 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:23,257 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 11:49:23,258 INFO L93 Difference]: Finished difference Result 3093 states and 4339 transitions. [2022-07-12 11:49:23,258 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-12 11:49:23,258 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2022-07-12 11:49:23,258 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 11:49:23,266 INFO L225 Difference]: With dead ends: 3093 [2022-07-12 11:49:23,266 INFO L226 Difference]: Without dead ends: 1567 [2022-07-12 11:49:23,271 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-12 11:49:23,272 INFO L413 NwaCegarLoop]: 1156 mSDtfsCounter, 1 mSDsluCounter, 2306 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 3462 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 11:49:23,273 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 3462 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 11:49:23,275 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1567 states. [2022-07-12 11:49:23,309 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1567 to 1567. [2022-07-12 11:49:23,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.3058823529411765) internal successors, (1443), 1117 states have internal predecessors, (1443), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-12 11:49:23,319 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2197 transitions. [2022-07-12 11:49:23,320 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2197 transitions. Word has length 63 [2022-07-12 11:49:23,320 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 11:49:23,320 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2197 transitions. [2022-07-12 11:49:23,320 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:23,320 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2197 transitions. [2022-07-12 11:49:23,323 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-07-12 11:49:23,323 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:23,324 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:23,351 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2022-07-12 11:49:23,537 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 11:49:23,538 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:23,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:23,538 INFO L85 PathProgramCache]: Analyzing trace with hash 1833716892, now seen corresponding path program 1 times [2022-07-12 11:49:23,540 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 11:49:23,540 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [521186666] [2022-07-12 11:49:23,541 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:23,541 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 11:49:23,541 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 11:49:23,542 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 11:49:23,597 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-07-12 11:49:24,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-12 11:49:24,458 INFO L263 TraceCheckSpWp]: Trace formula consists of 1919 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-12 11:49:24,461 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-12 11:49:24,501 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-12 11:49:24,501 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-12 11:49:24,501 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-12 11:49:24,501 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [521186666] [2022-07-12 11:49:24,501 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [521186666] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-12 11:49:24,501 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-12 11:49:24,502 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-12 11:49:24,502 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [881163743] [2022-07-12 11:49:24,502 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-12 11:49:24,502 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-12 11:49:24,502 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-12 11:49:24,502 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-12 11:49:24,503 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-12 11:49:24,503 INFO L87 Difference]: Start difference. First operand 1567 states and 2197 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:24,603 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-12 11:49:24,604 INFO L93 Difference]: Finished difference Result 3093 states and 4338 transitions. [2022-07-12 11:49:24,604 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-12 11:49:24,604 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 67 [2022-07-12 11:49:24,605 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-12 11:49:24,612 INFO L225 Difference]: With dead ends: 3093 [2022-07-12 11:49:24,612 INFO L226 Difference]: Without dead ends: 1555 [2022-07-12 11:49:24,617 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-12 11:49:24,620 INFO L413 NwaCegarLoop]: 1154 mSDtfsCounter, 9 mSDsluCounter, 3441 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 4595 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-12 11:49:24,621 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 4595 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-12 11:49:24,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1555 states. [2022-07-12 11:49:24,658 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1555 to 1555. [2022-07-12 11:49:24,661 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1555 states, 1097 states have (on average 1.3044667274384685) internal successors, (1431), 1108 states have internal predecessors, (1431), 376 states have call successors, (376), 84 states have call predecessors, (376), 81 states have return successors, (372), 368 states have call predecessors, (372), 370 states have call successors, (372) [2022-07-12 11:49:24,667 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1555 states to 1555 states and 2179 transitions. [2022-07-12 11:49:24,669 INFO L78 Accepts]: Start accepts. Automaton has 1555 states and 2179 transitions. Word has length 67 [2022-07-12 11:49:24,669 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-12 11:49:24,669 INFO L495 AbstractCegarLoop]: Abstraction has 1555 states and 2179 transitions. [2022-07-12 11:49:24,669 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-12 11:49:24,670 INFO L276 IsEmpty]: Start isEmpty. Operand 1555 states and 2179 transitions. [2022-07-12 11:49:24,673 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-12 11:49:24,673 INFO L187 NwaCegarLoop]: Found error trace [2022-07-12 11:49:24,673 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-12 11:49:24,711 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-07-12 11:49:24,893 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 11:49:24,894 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-12 11:49:24,894 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-12 11:49:24,894 INFO L85 PathProgramCache]: Analyzing trace with hash 688026883, now seen corresponding path program 1 times [2022-07-12 11:49:24,896 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-12 11:49:24,896 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [384623113] [2022-07-12 11:49:24,896 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-12 11:49:24,896 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-12 11:49:24,896 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-12 11:49:24,897 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-12 11:49:24,899 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-07-12 11:49:45,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 11:49:45,696 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-12 11:50:04,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-12 11:50:06,373 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-07-12 11:50:06,374 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-12 11:50:06,374 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-12 11:50:06,445 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-07-12 11:50:06,599 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-12 11:50:06,602 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-07-12 11:50:06,604 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-12 11:50:06,717 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 12.07 11:50:06 BoogieIcfgContainer [2022-07-12 11:50:06,717 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-12 11:50:06,717 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-12 11:50:06,717 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-12 11:50:06,718 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-12 11:50:06,718 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 12.07 11:49:20" (3/4) ... [2022-07-12 11:50:06,720 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-12 11:50:06,720 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-12 11:50:06,721 INFO L158 Benchmark]: Toolchain (without parser) took 60052.28ms. Allocated memory was 58.7MB in the beginning and 448.8MB in the end (delta: 390.1MB). Free memory was 26.7MB in the beginning and 304.4MB in the end (delta: -277.7MB). Peak memory consumption was 111.4MB. Max. memory is 16.1GB. [2022-07-12 11:50:06,721 INFO L158 Benchmark]: CDTParser took 0.16ms. Allocated memory is still 58.7MB. Free memory was 41.0MB in the beginning and 41.0MB in the end (delta: 44.5kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 11:50:06,722 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2236.81ms. Allocated memory was 58.7MB in the beginning and 186.6MB in the end (delta: 127.9MB). Free memory was 26.5MB in the beginning and 115.7MB in the end (delta: -89.2MB). Peak memory consumption was 87.3MB. Max. memory is 16.1GB. [2022-07-12 11:50:06,722 INFO L158 Benchmark]: Boogie Procedure Inliner took 177.57ms. Allocated memory is still 186.6MB. Free memory was 115.7MB in the beginning and 98.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-12 11:50:06,722 INFO L158 Benchmark]: Boogie Preprocessor took 128.05ms. Allocated memory is still 186.6MB. Free memory was 98.9MB in the beginning and 81.1MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-12 11:50:06,723 INFO L158 Benchmark]: RCFGBuilder took 11177.72ms. Allocated memory was 186.6MB in the beginning and 373.3MB in the end (delta: 186.6MB). Free memory was 81.1MB in the beginning and 258.7MB in the end (delta: -177.7MB). Peak memory consumption was 122.7MB. Max. memory is 16.1GB. [2022-07-12 11:50:06,723 INFO L158 Benchmark]: TraceAbstraction took 46321.35ms. Allocated memory was 373.3MB in the beginning and 448.8MB in the end (delta: 75.5MB). Free memory was 257.7MB in the beginning and 305.4MB in the end (delta: -47.8MB). Peak memory consumption was 27.7MB. Max. memory is 16.1GB. [2022-07-12 11:50:06,723 INFO L158 Benchmark]: Witness Printer took 3.06ms. Allocated memory is still 448.8MB. Free memory was 305.4MB in the beginning and 304.4MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-12 11:50:06,725 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.16ms. Allocated memory is still 58.7MB. Free memory was 41.0MB in the beginning and 41.0MB in the end (delta: 44.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2236.81ms. Allocated memory was 58.7MB in the beginning and 186.6MB in the end (delta: 127.9MB). Free memory was 26.5MB in the beginning and 115.7MB in the end (delta: -89.2MB). Peak memory consumption was 87.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 177.57ms. Allocated memory is still 186.6MB. Free memory was 115.7MB in the beginning and 98.9MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 128.05ms. Allocated memory is still 186.6MB. Free memory was 98.9MB in the beginning and 81.1MB in the end (delta: 17.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * RCFGBuilder took 11177.72ms. Allocated memory was 186.6MB in the beginning and 373.3MB in the end (delta: 186.6MB). Free memory was 81.1MB in the beginning and 258.7MB in the end (delta: -177.7MB). Peak memory consumption was 122.7MB. Max. memory is 16.1GB. * TraceAbstraction took 46321.35ms. Allocated memory was 373.3MB in the beginning and 448.8MB in the end (delta: 75.5MB). Free memory was 257.7MB in the beginning and 305.4MB in the end (delta: -47.8MB). Peak memory consumption was 27.7MB. Max. memory is 16.1GB. * Witness Printer took 3.06ms. Allocated memory is still 448.8MB. Free memory was 305.4MB in the beginning and 304.4MB in the end (delta: 1.0MB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8157]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6448. Possible FailurePath: [L4883-L4884] static struct device_attribute dev_attr_status = {{"status", 292U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, & show_status, 0}; [L4978-L4979] static struct device_attribute dev_attr_detach = {{"detach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_detach}; [L5100-L5101] static struct device_attribute dev_attr_attach = {{"attach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_attach}; [L5102-L5103] static struct attribute *dev_attrs[5U] = { & dev_attr_status.attr, & dev_attr_detach.attr, & dev_attr_attach.attr, & dev_attr_usbip_debug.attr, 0}; [L5104] struct attribute_group dev_attr_group = {0, 0, (struct attribute **)(& dev_attrs)}; [L5108] int LDV_IN_INTERRUPT ; [L6410] struct vhci_hcd *the_controller ; [L6434-L6437] static char const driver_name[9U] = { 'v', 'h', 'c', 'i', '_', 'h', 'c', 'd', '\000'}; [L6438-L6446] static char const driver_desc[31U] = { 'U', 'S', 'B', '/', 'I', 'P', ' ', 'V', 'i', 'r', 't', 'u', 'a', 'l', ' ', 'H', 'o', 's', 't', ' ', 'C', 'o', 'n', 't', 'r', 'o', 'l', 'l', 'e', 'r', '\000'}; [L6447-L6455] static char const *bit_desc[32U] = { "CONNECTION", "ENABLE", "SUSPEND", "OVER_CURRENT", "RESET", "R5", "R6", "R7", "POWER", "LOWSPEED", "HIGHSPEED", "PORT_TEST", "INDICATOR", "R13", "R14", "R15", "C_CONNECTION", "C_ENABLE", "C_SUSPEND", "C_OVER_CURRENT", "C_RESET", "R21", "R22", "R23", "R24", "R25", "R26", "R27", "R28", "R29", "R30", "R31"}; [L7632-L7636] static struct hc_driver vhci_hc_driver = {(char const *)(& driver_name), (char const *)(& driver_desc), 6664UL, 0, 32, 0, & vhci_start, 0, 0, & vhci_stop, 0, & vhci_get_frame_number, & vhci_urb_enqueue, & vhci_urb_dequeue, 0, 0, & vhci_hub_status, & vhci_hub_control, & vhci_bus_suspend, & vhci_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7792-L7794] static struct platform_driver vhci_driver = {& vhci_hcd_probe, & vhci_hcd_remove, 0, & vhci_hcd_suspend, & vhci_hcd_resume, {(char const *)(& driver_name), 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L7801-L7857] static struct platform_device the_pdev = {(char const *)(& driver_name), -1, {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, 0, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, 0, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL}, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0, 0}, 0U, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, & the_pdev_release}, 0U, 0, 0, {}}; [L8202] int ldv_usb_dev_state = 0; VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7974] struct usb_hcd *var_group1 ; [L7975] struct urb *var_group2 ; [L7976] gfp_t var_vhci_urb_enqueue_8_p2 ; [L7977] int var_vhci_urb_dequeue_9_p2 ; [L7978] char *var_vhci_hub_status_3_p1 ; [L7979] u16 var_vhci_hub_control_5_p1 ; [L7980] u16 var_vhci_hub_control_5_p2 ; [L7981] u16 var_vhci_hub_control_5_p3 ; [L7982] char *var_vhci_hub_control_5_p4 ; [L7983] u16 var_vhci_hub_control_5_p5 ; [L7984] struct platform_device *var_group3 ; [L7985] int res_vhci_hcd_probe_20 ; [L7986] pm_message_t var_vhci_hcd_suspend_22_p1 ; [L7987] struct device *var_group4 ; [L7988] int ldv_s_vhci_driver_platform_driver ; [L7989] int ldv_s_the_pdev_platform_device ; [L7990] int tmp ; [L7991] int tmp___0 ; [L7992] int tmp___1 ; [L7994] ldv_s_vhci_driver_platform_driver = 0 [L7995] ldv_s_the_pdev_platform_device = 0 [L7996] LDV_IN_INTERRUPT = 1 VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7997] FCALL ldv_initialize() VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7998] FCALL ldv_handler_precall() VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] CALL, EXPR vhci_init() [L7860] int ret ; [L7861] struct task_struct *tmp___0 ; [L7862] char *tmp___1 ; [L7863] struct thread_info *tmp___2 ; [L7864] int tmp___3 ; [L7865] struct task_struct *tmp___5 ; [L7866] char *tmp___6 ; [L7867] struct thread_info *tmp___7 ; [L7868] struct task_struct *tmp___9 ; [L7869] char *tmp___10 ; [L7870] struct thread_info *tmp___11 ; VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7872] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7884] CALL, EXPR usb_disabled() [L8396] return __VERIFIER_nondet_int(); [L7884] RET, EXPR usb_disabled() [L7884] tmp___3 = usb_disabled() [L7885] COND FALSE !(tmp___3 != 0) [L7890] CALL, EXPR platform_driver_register(& vhci_driver) [L8359] return __VERIFIER_nondet_int(); [L7890] RET, EXPR platform_driver_register(& vhci_driver) [L7890] ret = platform_driver_register(& vhci_driver) [L7891] COND FALSE !(ret < 0) [L7895] CALL, EXPR platform_device_register(& the_pdev) [L8352] return __VERIFIER_nondet_int(); [L7895] RET, EXPR platform_device_register(& the_pdev) [L7895] ret = platform_device_register(& the_pdev) [L7896] COND FALSE !(ret < 0) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7900] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7912] return (ret); VAL [\result=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] RET, EXPR vhci_init() [L7999] tmp = vhci_init() [L8000] COND FALSE !(tmp != 0) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8095] tmp___1 = __VERIFIER_nondet_int() [L8096] COND TRUE (tmp___1 != 0 || ldv_s_vhci_driver_platform_driver != 0) || ldv_s_the_pdev_platform_device != 0 VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___1=2147483648, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8006] tmp___0 = __VERIFIER_nondet_int() [L8008] case 0: [L8012] case 1: [L8016] case 2: VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=2147483648, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8017] FCALL ldv_handler_precall() VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=2147483648, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8018] CALL vhci_urb_enqueue(var_group1, var_group2, var_vhci_urb_enqueue_8_p2) [L7087] struct device *dev ; [L7088] int ret ; [L7089] unsigned long flags ; [L7090] struct task_struct *tmp___0 ; [L7091] char *tmp___1 ; [L7092] struct thread_info *tmp___2 ; [L7093] long tmp___3 ; [L7094] long tmp___4 ; [L7095] raw_spinlock_t *tmp___5 ; [L7096] __u8 type ; [L7097] struct usb_ctrlrequest *ctrlreq ; [L7098] struct vhci_device *vdev ; [L7099] struct vhci_device *tmp___6 ; [L7100] struct task_struct *tmp___8 ; [L7101] char *tmp___9 ; [L7102] struct thread_info *tmp___10 ; [L7103] struct usb_hcd *tmp___11 ; [L7105] EXPR urb->dev [L7105] dev = & (urb->dev)->dev [L7106] ret = 0 VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7107] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120] EXPR urb->transfer_buffer VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->transfer_buffer={-1152921513230336000:-1152921513163227136}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] CALL, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(c)=0, \old(exp)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8163] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __this_module={4398046511104:4096}, bit_desc={372:0}, c=0, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, exp=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] RET, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L)=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->transfer_buffer={-1152921513230336000:-1152921513163227136}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] tmp___3 = ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) [L7122] COND FALSE !(tmp___3 != 0L) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] CALL, EXPR spinlock_check(& the_controller->lock) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L5188] return (& lock->ldv_5812.rlock); VAL [\result={0:0}, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] RET, EXPR spinlock_check(& the_controller->lock) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, spinlock_check(& the_controller->lock)={0:0}, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] tmp___5 = spinlock_check(& the_controller->lock) [L7134] CALL, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [__this_module={4398046511104:4096}, arg0={0:0}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8294] return __VERIFIER_nondet_ulong(); [L7134] RET, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, _raw_spin_lock_irqsave(tmp___5)=394, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7134] flags = _raw_spin_lock_irqsave(tmp___5) [L7135] EXPR urb->status VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->status=-115, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7135] COND FALSE !(urb->status != -115) [L7141] CALL, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L8410] return __VERIFIER_nondet_int(); [L7141] RET, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L7141] ret = usb_hcd_link_urb_to_ep(hcd, urb) [L7142] COND FALSE !(ret != 0) [L7146] EXPR urb->pipe VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->pipe=-2147483648, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7146] COND TRUE ((urb->pipe >> 8) & 127U) == 0U [L7147] EXPR urb->pipe [L7147] type = (__u8 )(urb->pipe >> 30) [L7148] EXPR urb->setup_packet [L7148] ctrlreq = (struct usb_ctrlrequest *)urb->setup_packet [L7149] EXPR the_controller->pending_port VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_controller->pending_port=-2147483535, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] CALL, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(port)=2147483761, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L4809] return ((struct vhci_device *)(& the_controller->vdev) + (unsigned long )port); VAL [\old(port)=2147483761, \result={0:1597727918293}, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, port=2147483761, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] RET, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, port_to_vdev((__u32 )the_controller->pending_port)={0:1597727918293}, ret=0, the_controller={0:0}, the_controller->pending_port=-2147483535, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] tmp___6 = port_to_vdev((__u32 )the_controller->pending_port) [L7150] vdev = tmp___6 VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:1597727918293}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vdev={0:1597727918293}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7151] COND FALSE !((unsigned int )type != 2U || (unsigned long )ctrlreq == (unsigned long )((struct usb_ctrlrequest *)0)) [L7157] ctrlreq->bRequest [L7158] case 5: [L7160] ctrlreq->wValue [L7160] vdev->rhport [L7161] EXPR vdev->udev VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, ctrlreq->bRequest=5, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:1597727918293}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vdev={0:1597727918293}, vdev->udev={-4429993903243894720:-181692115183493184}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7161] COND TRUE (unsigned long )vdev->udev != (unsigned long )((struct usb_device *)0) [L7162] EXPR vdev->udev [L7162] CALL ldv_usb_put_dev_21(vdev->udev) [L8111] FCALL usb_put_dev(ldv_func_arg1) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, ldv_func_arg1={-4429993903243894720:-181692115183493184}, ldv_func_arg1={-4429993903243894720:-181692115183493184}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8112] CALL ldv_usb_put_dev() VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8227] COND FALSE !(ldv_usb_dev_state >= 2) VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8229] CALL ldv_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8157] reach_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 47 procedures, 893 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 46.1s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.5s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1136 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1133 mSDsluCounter, 10513 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6843 mSDsCounter, 7 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 40 IncrementalHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 7 mSolverCounterUnsat, 3670 mSDtfsCounter, 40 mSolverCounterSat, 0.1s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 149 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1567occurred in iteration=1, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.2s AutomataMinimizationTime, 3 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 22.5s SatisfiabilityAnalysisTime, 0.3s InterpolantComputationTime, 218 NumberOfCodeBlocks, 218 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 146 ConstructedInterpolants, 0 QuantifiedInterpolants, 190 SizeOfPredicates, 5 NumberOfNonLiveVariables, 5626 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 4/4 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-12 11:50:06,771 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Ended with exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample