./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 791161d1 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 23:05:59,682 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 23:05:59,684 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 23:05:59,719 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 23:05:59,719 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 23:05:59,721 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 23:05:59,723 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 23:05:59,725 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 23:05:59,727 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 23:05:59,733 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 23:05:59,734 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 23:05:59,735 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 23:05:59,736 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 23:05:59,738 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 23:05:59,740 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 23:05:59,741 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 23:05:59,745 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 23:05:59,746 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 23:05:59,748 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 23:05:59,749 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 23:05:59,753 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 23:05:59,755 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 23:05:59,755 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 23:05:59,756 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 23:05:59,757 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 23:05:59,762 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 23:05:59,763 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 23:05:59,763 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 23:05:59,765 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 23:05:59,765 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 23:05:59,766 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 23:05:59,766 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 23:05:59,768 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 23:05:59,768 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 23:05:59,769 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 23:05:59,770 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 23:05:59,770 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 23:05:59,770 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 23:05:59,771 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 23:05:59,771 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 23:05:59,771 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 23:05:59,773 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 23:05:59,773 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2022-07-22 23:05:59,799 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 23:05:59,800 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 23:05:59,800 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 23:05:59,800 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 23:05:59,801 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 23:05:59,801 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 23:05:59,801 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 23:05:59,801 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 23:05:59,802 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 23:05:59,802 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 23:05:59,802 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 23:05:59,804 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 23:05:59,805 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 23:05:59,805 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 23:05:59,805 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 23:05:59,805 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 23:05:59,805 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 23:05:59,806 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 23:05:59,806 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 23:05:59,806 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 23:05:59,806 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 23:05:59,806 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 23:05:59,807 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 23:05:59,807 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 23:05:59,807 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 23:05:59,807 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 23:05:59,808 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2022-07-22 23:05:59,808 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 23:05:59,808 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 23:05:59,809 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 23:05:59,809 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 [2022-07-22 23:06:00,043 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 23:06:00,072 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 23:06:00,075 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 23:06:00,076 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 23:06:00,077 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 23:06:00,078 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-22 23:06:00,151 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4d1373b5a/7d8acd3485dc4df1ab20a935ae56ad65/FLAGda2e1c4a0 [2022-07-22 23:06:00,819 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 23:06:00,820 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-22 23:06:00,868 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4d1373b5a/7d8acd3485dc4df1ab20a935ae56ad65/FLAGda2e1c4a0 [2022-07-22 23:06:01,154 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/4d1373b5a/7d8acd3485dc4df1ab20a935ae56ad65 [2022-07-22 23:06:01,157 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 23:06:01,158 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 23:06:01,161 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 23:06:01,161 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 23:06:01,190 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 23:06:01,191 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 11:06:01" (1/1) ... [2022-07-22 23:06:01,193 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@8adaa6f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:01, skipping insertion in model container [2022-07-22 23:06:01,193 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 11:06:01" (1/1) ... [2022-07-22 23:06:01,214 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 23:06:01,321 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 23:06:03,254 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-22 23:06:03,309 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 23:06:03,341 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 23:06:03,695 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-22 23:06:03,708 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 23:06:03,780 INFO L208 MainTranslator]: Completed translation [2022-07-22 23:06:03,782 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03 WrapperNode [2022-07-22 23:06:03,783 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 23:06:03,784 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 23:06:03,784 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 23:06:03,784 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 23:06:03,792 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:03,862 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:03,995 INFO L137 Inliner]: procedures = 204, calls = 1862, calls flagged for inlining = 100, calls inlined = 66, statements flattened = 3028 [2022-07-22 23:06:03,996 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 23:06:03,997 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 23:06:03,997 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 23:06:03,997 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 23:06:04,006 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,007 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,030 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,036 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,122 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,146 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,172 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,202 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 23:06:04,203 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 23:06:04,203 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 23:06:04,204 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 23:06:04,205 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (1/1) ... [2022-07-22 23:06:04,213 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 23:06:04,225 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 23:06:04,243 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 23:06:04,262 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 23:06:04,284 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2022-07-22 23:06:04,284 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_driver_unregister [2022-07-22 23:06:04,284 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_dev [2022-07-22 23:06:04,285 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_dev [2022-07-22 23:06:04,285 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_dev [2022-07-22 23:06:04,285 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_dev [2022-07-22 23:06:04,285 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-07-22 23:06:04,285 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-07-22 23:06:04,285 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_to_hcd [2022-07-22 23:06:04,285 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_to_hcd [2022-07-22 23:06:04,286 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-22 23:06:04,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-22 23:06:04,286 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-22 23:06:04,286 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-22 23:06:04,286 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-22 23:06:04,286 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-22 23:06:04,287 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-07-22 23:06:04,287 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-07-22 23:06:04,287 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_giveback_urb [2022-07-22 23:06:04,287 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_giveback_urb [2022-07-22 23:06:04,287 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-22 23:06:04,287 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-07-22 23:06:04,287 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-07-22 23:06:04,288 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-22 23:06:04,288 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2022-07-22 23:06:04,288 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2022-07-22 23:06:04,288 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-07-22 23:06:04,288 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-07-22 23:06:04,288 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-22 23:06:04,288 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-22 23:06:04,288 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-22 23:06:04,289 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-22 23:06:04,289 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_event_add [2022-07-22 23:06:04,289 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_event_add [2022-07-22 23:06:04,289 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2022-07-22 23:06:04,289 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2022-07-22 23:06:04,290 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-07-22 23:06:04,290 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-07-22 23:06:04,290 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-07-22 23:06:04,290 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-07-22 23:06:04,290 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2022-07-22 23:06:04,290 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2022-07-22 23:06:04,291 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2022-07-22 23:06:04,291 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2022-07-22 23:06:04,291 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2022-07-22 23:06:04,291 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2022-07-22 23:06:04,292 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2022-07-22 23:06:04,292 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2022-07-22 23:06:04,292 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-07-22 23:06:04,292 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-07-22 23:06:04,292 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_unlink_urb_from_ep [2022-07-22 23:06:04,292 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_unlink_urb_from_ep [2022-07-22 23:06:04,292 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2022-07-22 23:06:04,293 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2022-07-22 23:06:04,293 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2022-07-22 23:06:04,294 INFO L130 BoogieDeclarations]: Found specification of procedure dump_port_status [2022-07-22 23:06:04,294 INFO L138 BoogieDeclarations]: Found implementation of procedure dump_port_status [2022-07-22 23:06:04,294 INFO L130 BoogieDeclarations]: Found specification of procedure port_to_vdev [2022-07-22 23:06:04,295 INFO L138 BoogieDeclarations]: Found implementation of procedure port_to_vdev [2022-07-22 23:06:04,295 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-22 23:06:04,295 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-22 23:06:04,295 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2022-07-22 23:06:04,295 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2022-07-22 23:06:04,296 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2022-07-22 23:06:04,296 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2022-07-22 23:06:04,296 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2022-07-22 23:06:04,296 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-22 23:06:04,296 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-22 23:06:04,296 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_dev [2022-07-22 23:06:04,296 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_dev [2022-07-22 23:06:04,296 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-22 23:06:04,297 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_poll_rh_status [2022-07-22 23:06:04,297 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_poll_rh_status [2022-07-22 23:06:04,297 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-22 23:06:04,298 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 23:06:04,298 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-22 23:06:04,298 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-07-22 23:06:04,298 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2022-07-22 23:06:04,298 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2022-07-22 23:06:04,298 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-07-22 23:06:04,298 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-07-22 23:06:04,299 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-22 23:06:04,299 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-22 23:06:04,299 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-07-22 23:06:04,299 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-07-22 23:06:04,299 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_vhci [2022-07-22 23:06:04,299 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_vhci [2022-07-22 23:06:04,299 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_add_return [2022-07-22 23:06:04,300 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_add_return [2022-07-22 23:06:04,300 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2022-07-22 23:06:04,301 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2022-07-22 23:06:04,301 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_put_dev [2022-07-22 23:06:04,301 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_put_dev [2022-07-22 23:06:04,301 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_dev [2022-07-22 23:06:04,302 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_dev [2022-07-22 23:06:04,302 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2022-07-22 23:06:04,302 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2022-07-22 23:06:04,302 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-07-22 23:06:04,302 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-07-22 23:06:04,303 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 23:06:04,303 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2022-07-22 23:06:04,303 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2022-07-22 23:06:04,303 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_task_init [2022-07-22 23:06:04,359 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_task_init [2022-07-22 23:06:04,360 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 23:06:04,360 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 23:06:04,896 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 23:06:04,899 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 23:06:07,443 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 23:06:07,460 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 23:06:07,460 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-22 23:06:07,468 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 11:06:07 BoogieIcfgContainer [2022-07-22 23:06:07,469 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 23:06:07,471 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 23:06:07,471 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 23:06:07,475 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 23:06:07,476 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 11:06:01" (1/3) ... [2022-07-22 23:06:07,477 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56df3047 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 11:06:07, skipping insertion in model container [2022-07-22 23:06:07,478 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:03" (2/3) ... [2022-07-22 23:06:07,484 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@56df3047 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 11:06:07, skipping insertion in model container [2022-07-22 23:06:07,486 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 11:06:07" (3/3) ... [2022-07-22 23:06:07,488 INFO L111 eAbstractionObserver]: Analyzing ICFG main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-22 23:06:07,503 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 23:06:07,503 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 23:06:07,607 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 23:06:07,617 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@282fdca6, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@21b61646 [2022-07-22 23:06:07,617 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 23:06:07,625 INFO L276 IsEmpty]: Start isEmpty. Operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) [2022-07-22 23:06:07,662 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-22 23:06:07,663 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:07,663 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:07,664 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:07,670 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:07,670 INFO L85 PathProgramCache]: Analyzing trace with hash 1287876963, now seen corresponding path program 1 times [2022-07-22 23:06:07,679 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 23:06:07,680 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [509502849] [2022-07-22 23:06:07,680 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:07,681 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 23:06:08,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:08,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 23:06:08,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:08,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-22 23:06:08,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:08,276 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 23:06:08,277 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 23:06:08,277 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [509502849] [2022-07-22 23:06:08,278 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [509502849] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 23:06:08,278 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 23:06:08,278 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 23:06:08,280 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [829243478] [2022-07-22 23:06:08,280 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 23:06:08,285 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 23:06:08,285 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 23:06:08,319 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 23:06:08,321 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 23:06:08,326 INFO L87 Difference]: Start difference. First operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 23:06:08,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 23:06:08,581 INFO L93 Difference]: Finished difference Result 2459 states and 3506 transitions. [2022-07-22 23:06:08,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 23:06:08,584 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 19 [2022-07-22 23:06:08,584 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 23:06:08,607 INFO L225 Difference]: With dead ends: 2459 [2022-07-22 23:06:08,607 INFO L226 Difference]: Without dead ends: 1570 [2022-07-22 23:06:08,618 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 6 GetRequests, 5 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 23:06:08,621 INFO L413 NwaCegarLoop]: 1360 mSDtfsCounter, 1127 mSDsluCounter, 1096 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1127 SdHoareTripleChecker+Valid, 2456 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 23:06:08,623 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1127 Valid, 2456 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 23:06:08,643 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2022-07-22 23:06:08,809 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 1567. [2022-07-22 23:06:08,815 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.306787330316742) internal successors, (1444), 1117 states have internal predecessors, (1444), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-22 23:06:08,827 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2198 transitions. [2022-07-22 23:06:08,831 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2198 transitions. Word has length 19 [2022-07-22 23:06:08,832 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 23:06:08,832 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2198 transitions. [2022-07-22 23:06:08,833 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 3 states have internal predecessors, (13), 2 states have call successors, (4), 3 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 23:06:08,833 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2198 transitions. [2022-07-22 23:06:08,848 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-22 23:06:08,849 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:08,849 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:08,850 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2022-07-22 23:06:08,850 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:08,851 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:08,851 INFO L85 PathProgramCache]: Analyzing trace with hash -619409099, now seen corresponding path program 1 times [2022-07-22 23:06:08,851 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 23:06:08,851 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2110898777] [2022-07-22 23:06:08,851 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:08,852 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 23:06:09,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,145 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 23:06:09,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-22 23:06:09,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2022-07-22 23:06:09,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 27 [2022-07-22 23:06:09,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 33 [2022-07-22 23:06:09,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 38 [2022-07-22 23:06:09,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 47 [2022-07-22 23:06:09,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 55 [2022-07-22 23:06:09,224 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,230 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-07-22 23:06:09,231 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 23:06:09,231 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2110898777] [2022-07-22 23:06:09,231 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2110898777] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 23:06:09,231 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 23:06:09,232 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 23:06:09,232 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2140159562] [2022-07-22 23:06:09,232 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 23:06:09,234 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-22 23:06:09,234 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 23:06:09,235 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 23:06:09,235 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 23:06:09,235 INFO L87 Difference]: Start difference. First operand 1567 states and 2198 transitions. Second operand has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:09,330 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 23:06:09,330 INFO L93 Difference]: Finished difference Result 3093 states and 4339 transitions. [2022-07-22 23:06:09,331 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 23:06:09,331 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2022-07-22 23:06:09,332 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 23:06:09,343 INFO L225 Difference]: With dead ends: 3093 [2022-07-22 23:06:09,344 INFO L226 Difference]: Without dead ends: 1567 [2022-07-22 23:06:09,356 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 21 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-22 23:06:09,358 INFO L413 NwaCegarLoop]: 1156 mSDtfsCounter, 1 mSDsluCounter, 2306 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 3462 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 23:06:09,358 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 3462 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 23:06:09,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1567 states. [2022-07-22 23:06:09,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1567 to 1567. [2022-07-22 23:06:09,439 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.3058823529411765) internal successors, (1443), 1117 states have internal predecessors, (1443), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-22 23:06:09,450 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2197 transitions. [2022-07-22 23:06:09,452 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2197 transitions. Word has length 63 [2022-07-22 23:06:09,453 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 23:06:09,454 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2197 transitions. [2022-07-22 23:06:09,454 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.0) internal successors, (44), 4 states have internal predecessors, (44), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:09,455 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2197 transitions. [2022-07-22 23:06:09,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-07-22 23:06:09,463 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:09,463 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:09,464 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2022-07-22 23:06:09,464 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:09,464 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:09,465 INFO L85 PathProgramCache]: Analyzing trace with hash 1833716892, now seen corresponding path program 1 times [2022-07-22 23:06:09,465 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 23:06:09,465 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1463009589] [2022-07-22 23:06:09,465 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:09,466 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 23:06:09,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2022-07-22 23:06:09,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 5 [2022-07-22 23:06:09,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2022-07-22 23:06:09,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 31 [2022-07-22 23:06:09,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 37 [2022-07-22 23:06:09,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 42 [2022-07-22 23:06:09,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 51 [2022-07-22 23:06:09,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,799 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 59 [2022-07-22 23:06:09,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:09,807 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 2 trivial. 0 not checked. [2022-07-22 23:06:09,807 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 23:06:09,807 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1463009589] [2022-07-22 23:06:09,808 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1463009589] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 23:06:09,808 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 23:06:09,808 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 23:06:09,808 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1571849664] [2022-07-22 23:06:09,808 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 23:06:09,809 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 23:06:09,809 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 23:06:09,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 23:06:09,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 23:06:09,810 INFO L87 Difference]: Start difference. First operand 1567 states and 2197 transitions. Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:09,926 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 23:06:09,926 INFO L93 Difference]: Finished difference Result 3093 states and 4338 transitions. [2022-07-22 23:06:09,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 23:06:09,927 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 67 [2022-07-22 23:06:09,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 23:06:09,937 INFO L225 Difference]: With dead ends: 3093 [2022-07-22 23:06:09,937 INFO L226 Difference]: Without dead ends: 1555 [2022-07-22 23:06:09,943 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 23 GetRequests, 18 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-22 23:06:09,944 INFO L413 NwaCegarLoop]: 1154 mSDtfsCounter, 9 mSDsluCounter, 3441 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 4595 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 23:06:09,945 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 4595 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 23:06:09,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1555 states. [2022-07-22 23:06:09,997 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1555 to 1555. [2022-07-22 23:06:10,001 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1555 states, 1097 states have (on average 1.3044667274384685) internal successors, (1431), 1108 states have internal predecessors, (1431), 376 states have call successors, (376), 84 states have call predecessors, (376), 81 states have return successors, (372), 368 states have call predecessors, (372), 370 states have call successors, (372) [2022-07-22 23:06:10,011 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1555 states to 1555 states and 2179 transitions. [2022-07-22 23:06:10,012 INFO L78 Accepts]: Start accepts. Automaton has 1555 states and 2179 transitions. Word has length 67 [2022-07-22 23:06:10,013 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 23:06:10,013 INFO L495 AbstractCegarLoop]: Abstraction has 1555 states and 2179 transitions. [2022-07-22 23:06:10,013 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 2 states have call successors, (10), 2 states have call predecessors, (10), 1 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:10,014 INFO L276 IsEmpty]: Start isEmpty. Operand 1555 states and 2179 transitions. [2022-07-22 23:06:10,017 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-22 23:06:10,017 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:10,017 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:10,018 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2022-07-22 23:06:10,018 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:10,018 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:10,019 INFO L85 PathProgramCache]: Analyzing trace with hash 688026883, now seen corresponding path program 1 times [2022-07-22 23:06:10,019 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 23:06:10,019 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [701739698] [2022-07-22 23:06:10,019 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:10,019 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 23:06:10,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 23:06:10,590 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-22 23:06:10,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 23:06:11,041 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-22 23:06:11,041 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-22 23:06:11,042 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 23:06:11,044 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2022-07-22 23:06:11,048 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-07-22 23:06:11,051 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 23:06:11,166 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 11:06:11 BoogieIcfgContainer [2022-07-22 23:06:11,166 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 23:06:11,167 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 23:06:11,167 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 23:06:11,167 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 23:06:11,168 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 11:06:07" (3/4) ... [2022-07-22 23:06:11,171 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-22 23:06:11,171 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 23:06:11,172 INFO L158 Benchmark]: Toolchain (without parser) took 10013.59ms. Allocated memory was 94.4MB in the beginning and 331.4MB in the end (delta: 237.0MB). Free memory was 47.5MB in the beginning and 159.3MB in the end (delta: -111.8MB). Peak memory consumption was 127.0MB. Max. memory is 16.1GB. [2022-07-22 23:06:11,172 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 77.6MB. Free memory was 41.4MB in the beginning and 41.4MB in the end (delta: 37.8kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 23:06:11,172 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2622.80ms. Allocated memory was 94.4MB in the beginning and 142.6MB in the end (delta: 48.2MB). Free memory was 47.3MB in the beginning and 58.1MB in the end (delta: -10.8MB). Peak memory consumption was 46.5MB. Max. memory is 16.1GB. [2022-07-22 23:06:11,173 INFO L158 Benchmark]: Boogie Procedure Inliner took 211.96ms. Allocated memory is still 142.6MB. Free memory was 58.1MB in the beginning and 72.8MB in the end (delta: -14.7MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. [2022-07-22 23:06:11,173 INFO L158 Benchmark]: Boogie Preprocessor took 204.94ms. Allocated memory is still 142.6MB. Free memory was 72.8MB in the beginning and 56.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-22 23:06:11,174 INFO L158 Benchmark]: RCFGBuilder took 3265.85ms. Allocated memory was 142.6MB in the beginning and 245.4MB in the end (delta: 102.8MB). Free memory was 56.1MB in the beginning and 68.8MB in the end (delta: -12.8MB). Peak memory consumption was 102.0MB. Max. memory is 16.1GB. [2022-07-22 23:06:11,174 INFO L158 Benchmark]: TraceAbstraction took 3695.68ms. Allocated memory was 245.4MB in the beginning and 331.4MB in the end (delta: 86.0MB). Free memory was 67.8MB in the beginning and 159.3MB in the end (delta: -91.6MB). Peak memory consumption was 86.7MB. Max. memory is 16.1GB. [2022-07-22 23:06:11,174 INFO L158 Benchmark]: Witness Printer took 4.29ms. Allocated memory is still 331.4MB. Free memory is still 159.3MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 23:06:11,176 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 77.6MB. Free memory was 41.4MB in the beginning and 41.4MB in the end (delta: 37.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2622.80ms. Allocated memory was 94.4MB in the beginning and 142.6MB in the end (delta: 48.2MB). Free memory was 47.3MB in the beginning and 58.1MB in the end (delta: -10.8MB). Peak memory consumption was 46.5MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 211.96ms. Allocated memory is still 142.6MB. Free memory was 58.1MB in the beginning and 72.8MB in the end (delta: -14.7MB). Peak memory consumption was 13.3MB. Max. memory is 16.1GB. * Boogie Preprocessor took 204.94ms. Allocated memory is still 142.6MB. Free memory was 72.8MB in the beginning and 56.1MB in the end (delta: 16.8MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * RCFGBuilder took 3265.85ms. Allocated memory was 142.6MB in the beginning and 245.4MB in the end (delta: 102.8MB). Free memory was 56.1MB in the beginning and 68.8MB in the end (delta: -12.8MB). Peak memory consumption was 102.0MB. Max. memory is 16.1GB. * TraceAbstraction took 3695.68ms. Allocated memory was 245.4MB in the beginning and 331.4MB in the end (delta: 86.0MB). Free memory was 67.8MB in the beginning and 159.3MB in the end (delta: -91.6MB). Peak memory consumption was 86.7MB. Max. memory is 16.1GB. * Witness Printer took 4.29ms. Allocated memory is still 331.4MB. Free memory is still 159.3MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8157]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6448, overapproximation of bitwiseAnd at line 7146. Possible FailurePath: [L4883-L4884] static struct device_attribute dev_attr_status = {{"status", 292U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, & show_status, 0}; [L4978-L4979] static struct device_attribute dev_attr_detach = {{"detach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_detach}; [L5100-L5101] static struct device_attribute dev_attr_attach = {{"attach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_attach}; [L5102-L5103] static struct attribute *dev_attrs[5U] = { & dev_attr_status.attr, & dev_attr_detach.attr, & dev_attr_attach.attr, & dev_attr_usbip_debug.attr, 0}; [L5104] struct attribute_group dev_attr_group = {0, 0, (struct attribute **)(& dev_attrs)}; [L5108] int LDV_IN_INTERRUPT ; [L6410] struct vhci_hcd *the_controller ; [L6434-L6437] static char const driver_name[9U] = { 'v', 'h', 'c', 'i', '_', 'h', 'c', 'd', '\000'}; [L6438-L6446] static char const driver_desc[31U] = { 'U', 'S', 'B', '/', 'I', 'P', ' ', 'V', 'i', 'r', 't', 'u', 'a', 'l', ' ', 'H', 'o', 's', 't', ' ', 'C', 'o', 'n', 't', 'r', 'o', 'l', 'l', 'e', 'r', '\000'}; [L6447-L6455] static char const *bit_desc[32U] = { "CONNECTION", "ENABLE", "SUSPEND", "OVER_CURRENT", "RESET", "R5", "R6", "R7", "POWER", "LOWSPEED", "HIGHSPEED", "PORT_TEST", "INDICATOR", "R13", "R14", "R15", "C_CONNECTION", "C_ENABLE", "C_SUSPEND", "C_OVER_CURRENT", "C_RESET", "R21", "R22", "R23", "R24", "R25", "R26", "R27", "R28", "R29", "R30", "R31"}; [L7632-L7636] static struct hc_driver vhci_hc_driver = {(char const *)(& driver_name), (char const *)(& driver_desc), 6664UL, 0, 32, 0, & vhci_start, 0, 0, & vhci_stop, 0, & vhci_get_frame_number, & vhci_urb_enqueue, & vhci_urb_dequeue, 0, 0, & vhci_hub_status, & vhci_hub_control, & vhci_bus_suspend, & vhci_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7792-L7794] static struct platform_driver vhci_driver = {& vhci_hcd_probe, & vhci_hcd_remove, 0, & vhci_hcd_suspend, & vhci_hcd_resume, {(char const *)(& driver_name), 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L7801-L7857] static struct platform_device the_pdev = {(char const *)(& driver_name), -1, {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, 0, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, 0, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL}, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0, 0}, 0U, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, & the_pdev_release}, 0U, 0, 0, {}}; [L8202] int ldv_usb_dev_state = 0; VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7974] struct usb_hcd *var_group1 ; [L7975] struct urb *var_group2 ; [L7976] gfp_t var_vhci_urb_enqueue_8_p2 ; [L7977] int var_vhci_urb_dequeue_9_p2 ; [L7978] char *var_vhci_hub_status_3_p1 ; [L7979] u16 var_vhci_hub_control_5_p1 ; [L7980] u16 var_vhci_hub_control_5_p2 ; [L7981] u16 var_vhci_hub_control_5_p3 ; [L7982] char *var_vhci_hub_control_5_p4 ; [L7983] u16 var_vhci_hub_control_5_p5 ; [L7984] struct platform_device *var_group3 ; [L7985] int res_vhci_hcd_probe_20 ; [L7986] pm_message_t var_vhci_hcd_suspend_22_p1 ; [L7987] struct device *var_group4 ; [L7988] int ldv_s_vhci_driver_platform_driver ; [L7989] int ldv_s_the_pdev_platform_device ; [L7990] int tmp ; [L7991] int tmp___0 ; [L7992] int tmp___1 ; [L7994] ldv_s_vhci_driver_platform_driver = 0 [L7995] ldv_s_the_pdev_platform_device = 0 [L7996] LDV_IN_INTERRUPT = 1 VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7997] FCALL ldv_initialize() VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7998] FCALL ldv_handler_precall() VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] CALL, EXPR vhci_init() [L7860] int ret ; [L7861] struct task_struct *tmp___0 ; [L7862] char *tmp___1 ; [L7863] struct thread_info *tmp___2 ; [L7864] int tmp___3 ; [L7865] struct task_struct *tmp___5 ; [L7866] char *tmp___6 ; [L7867] struct thread_info *tmp___7 ; [L7868] struct task_struct *tmp___9 ; [L7869] char *tmp___10 ; [L7870] struct thread_info *tmp___11 ; VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7872] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7884] CALL, EXPR usb_disabled() [L8396] return __VERIFIER_nondet_int(); [L7884] RET, EXPR usb_disabled() [L7884] tmp___3 = usb_disabled() [L7885] COND FALSE !(tmp___3 != 0) [L7890] CALL, EXPR platform_driver_register(& vhci_driver) [L8359] return __VERIFIER_nondet_int(); [L7890] RET, EXPR platform_driver_register(& vhci_driver) [L7890] ret = platform_driver_register(& vhci_driver) [L7891] COND FALSE !(ret < 0) [L7895] CALL, EXPR platform_device_register(& the_pdev) [L8352] return __VERIFIER_nondet_int(); [L7895] RET, EXPR platform_device_register(& the_pdev) [L7895] ret = platform_device_register(& the_pdev) [L7896] COND FALSE !(ret < 0) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7900] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7912] return (ret); VAL [\result=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] RET, EXPR vhci_init() [L7999] tmp = vhci_init() [L8000] COND FALSE !(tmp != 0) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8095] tmp___1 = __VERIFIER_nondet_int() [L8096] COND TRUE (tmp___1 != 0 || ldv_s_vhci_driver_platform_driver != 0) || ldv_s_the_pdev_platform_device != 0 VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___1=-2, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8006] tmp___0 = __VERIFIER_nondet_int() [L8008] case 0: [L8012] case 1: [L8016] case 2: VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=-2, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8017] FCALL ldv_handler_precall() VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=-2, usbip_debug_flag=4294967304, var_vhci_hcd_suspend_22_p1={376:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8018] CALL vhci_urb_enqueue(var_group1, var_group2, var_vhci_urb_enqueue_8_p2) [L7087] struct device *dev ; [L7088] int ret ; [L7089] unsigned long flags ; [L7090] struct task_struct *tmp___0 ; [L7091] char *tmp___1 ; [L7092] struct thread_info *tmp___2 ; [L7093] long tmp___3 ; [L7094] long tmp___4 ; [L7095] raw_spinlock_t *tmp___5 ; [L7096] __u8 type ; [L7097] struct usb_ctrlrequest *ctrlreq ; [L7098] struct vhci_device *vdev ; [L7099] struct vhci_device *tmp___6 ; [L7100] struct task_struct *tmp___8 ; [L7101] char *tmp___9 ; [L7102] struct thread_info *tmp___10 ; [L7103] struct usb_hcd *tmp___11 ; [L7105] EXPR urb->dev [L7105] dev = & (urb->dev)->dev [L7106] ret = 0 VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7107] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120] EXPR urb->transfer_buffer VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, urb->transfer_buffer={377:-376}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] CALL, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(c)=0, \old(exp)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8163] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, c=0, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, exp=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] RET, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L)=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={4294967308:0}, urb={4294967308:0}, urb->transfer_buffer={377:-376}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] tmp___3 = ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) [L7122] COND FALSE !(tmp___3 != 0L) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] CALL, EXPR spinlock_check(& the_controller->lock) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L5188] return (& lock->ldv_5812.rlock); VAL [\result={0:0}, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] RET, EXPR spinlock_check(& the_controller->lock) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, spinlock_check(& the_controller->lock)={0:0}, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] tmp___5 = spinlock_check(& the_controller->lock) [L7134] CALL, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [__this_module={4294967298:4294967306}, arg0={0:0}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8294] return __VERIFIER_nondet_ulong(); [L7134] RET, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, _raw_spin_lock_irqsave(tmp___5)=4294967305, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7134] flags = _raw_spin_lock_irqsave(tmp___5) [L7135] EXPR urb->status VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={4294967308:0}, urb={4294967308:0}, urb->status=-115, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7135] COND FALSE !(urb->status != -115) [L7141] CALL, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L8410] return __VERIFIER_nondet_int(); [L7141] RET, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L7141] ret = usb_hcd_link_urb_to_ep(hcd, urb) [L7142] COND FALSE !(ret != 0) [L7146] EXPR urb->pipe VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={4294967308:0}, urb={4294967308:0}, urb->pipe=-271656681473, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7146] COND TRUE ((urb->pipe >> 8) & 127U) == 0U [L7147] EXPR urb->pipe [L7147] type = (__u8 )(urb->pipe >> 30) [L7148] EXPR urb->setup_packet [L7148] ctrlreq = (struct usb_ctrlrequest *)urb->setup_packet [L7149] EXPR the_controller->pending_port VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_controller->pending_port=4294967297, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] CALL, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(port)=1, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L4809] return ((struct vhci_device *)(& the_controller->vdev) + (unsigned long )port); VAL [\old(port)=1, \result={0:853}, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, port=1, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] RET, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, port_to_vdev((__u32 )the_controller->pending_port)={0:853}, ret=0, the_controller={0:0}, the_controller->pending_port=4294967297, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] tmp___6 = port_to_vdev((__u32 )the_controller->pending_port) [L7150] vdev = tmp___6 VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:853}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vdev={0:853}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7151] COND FALSE !((unsigned int )type != 2U || (unsigned long )ctrlreq == (unsigned long )((struct usb_ctrlrequest *)0)) [L7157] ctrlreq->bRequest [L7158] case 5: [L7160] ctrlreq->wValue [L7160] vdev->rhport [L7161] EXPR vdev->udev VAL [\old(mem_flags)=4, __this_module={4294967298:4294967306}, bit_desc={372:0}, ctrlreq={380:-379}, ctrlreq->bRequest=-251, dev={4294967303:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=4294967305, hcd={4294967299:4294967301}, hcd={4294967299:4294967301}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=4, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:853}, type=2, urb={4294967308:0}, urb={4294967308:0}, usbip_debug_flag=4294967304, vdev={0:853}, vdev->udev={-377:378}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7161] COND TRUE (unsigned long )vdev->udev != (unsigned long )((struct usb_device *)0) [L7162] EXPR vdev->udev [L7162] CALL ldv_usb_put_dev_21(vdev->udev) [L8111] FCALL usb_put_dev(ldv_func_arg1) VAL [__this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, ldv_func_arg1={-377:378}, ldv_func_arg1={-377:378}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8112] CALL ldv_usb_put_dev() VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8227] COND FALSE !(ldv_usb_dev_state >= 2) VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8229] CALL ldv_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8157] reach_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4294967298:4294967306}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={4294967307:4294967302}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=4294967304, vhci_driver={374:0}, vhci_hc_driver={373:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 47 procedures, 893 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 3.5s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.1s, AutomataDifference: 0.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1140 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1137 mSDsluCounter, 10513 SdHoareTripleChecker+Invalid, 0.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6843 mSDsCounter, 7 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 40 IncrementalHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 7 mSolverCounterUnsat, 3670 mSDtfsCounter, 40 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 50 GetRequests, 41 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1567occurred in iteration=1, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 3 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.1s SsaConstructionTime, 1.0s SatisfiabilityAnalysisTime, 0.6s InterpolantComputationTime, 218 NumberOfCodeBlocks, 218 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 146 ConstructedInterpolants, 0 QuantifiedInterpolants, 194 SizeOfPredicates, 0 NumberOfNonLiveVariables, 0 ConjunctsInSsa, 0 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 4/4 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-22 23:06:11,223 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 --- Real Ultimate output --- This is Ultimate 0.2.2-?-791161d [2022-07-22 23:06:13,434 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 23:06:13,438 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 23:06:13,490 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 23:06:13,490 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 23:06:13,492 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 23:06:13,497 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 23:06:13,501 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 23:06:13,504 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 23:06:13,511 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 23:06:13,512 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 23:06:13,518 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 23:06:13,518 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 23:06:13,521 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 23:06:13,522 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 23:06:13,527 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 23:06:13,528 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 23:06:13,530 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 23:06:13,532 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 23:06:13,539 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 23:06:13,542 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 23:06:13,543 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 23:06:13,546 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 23:06:13,547 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 23:06:13,549 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 23:06:13,552 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 23:06:13,553 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 23:06:13,553 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 23:06:13,554 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 23:06:13,555 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 23:06:13,555 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 23:06:13,556 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 23:06:13,558 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 23:06:13,559 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 23:06:13,561 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 23:06:13,561 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 23:06:13,562 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 23:06:13,562 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 23:06:13,563 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 23:06:13,563 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 23:06:13,564 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 23:06:13,565 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 23:06:13,569 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2022-07-22 23:06:13,611 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 23:06:13,611 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 23:06:13,612 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 23:06:13,612 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 23:06:13,613 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2022-07-22 23:06:13,613 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2022-07-22 23:06:13,614 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 23:06:13,614 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 23:06:13,615 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 23:06:13,616 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 23:06:13,616 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 23:06:13,616 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2022-07-22 23:06:13,616 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2022-07-22 23:06:13,617 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2022-07-22 23:06:13,617 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2022-07-22 23:06:13,617 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2022-07-22 23:06:13,617 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2022-07-22 23:06:13,617 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 23:06:13,618 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 23:06:13,618 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2022-07-22 23:06:13,618 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 23:06:13,618 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 23:06:13,618 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2022-07-22 23:06:13,619 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 23:06:13,619 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 23:06:13,619 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2022-07-22 23:06:13,619 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2022-07-22 23:06:13,620 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2022-07-22 23:06:13,620 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2022-07-22 23:06:13,620 INFO L138 SettingsManager]: * Apply one-shot large block encoding in concurrent analysis=false [2022-07-22 23:06:13,621 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2022-07-22 23:06:13,621 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2022-07-22 23:06:13,621 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2022-07-22 23:06:13,621 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 87ebe4cbc19149709e03f5df167fc3a270d2a12f873f1a9ed2e481b56a29b864 [2022-07-22 23:06:13,967 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 23:06:13,987 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 23:06:13,989 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 23:06:13,991 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 23:06:13,991 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 23:06:13,993 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-22 23:06:14,064 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6042a2b05/5226f63cc1b54d5bbfa2fd4e1ce556cc/FLAG5c03453ba [2022-07-22 23:06:14,823 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 23:06:14,823 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-22 23:06:14,880 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6042a2b05/5226f63cc1b54d5bbfa2fd4e1ce556cc/FLAG5c03453ba [2022-07-22 23:06:15,392 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6042a2b05/5226f63cc1b54d5bbfa2fd4e1ce556cc [2022-07-22 23:06:15,395 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 23:06:15,396 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 23:06:15,399 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 23:06:15,400 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 23:06:15,403 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 23:06:15,404 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 11:06:15" (1/1) ... [2022-07-22 23:06:15,405 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6e9c0259 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:15, skipping insertion in model container [2022-07-22 23:06:15,406 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 11:06:15" (1/1) ... [2022-07-22 23:06:15,412 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 23:06:15,535 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 23:06:17,435 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-22 23:06:17,513 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 23:06:17,567 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2022-07-22 23:06:17,613 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 23:06:17,942 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-22 23:06:17,950 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 23:06:17,975 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 23:06:18,359 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-commit-tester/main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i[260799,260812] [2022-07-22 23:06:18,370 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 23:06:18,460 INFO L208 MainTranslator]: Completed translation [2022-07-22 23:06:18,461 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18 WrapperNode [2022-07-22 23:06:18,462 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 23:06:18,463 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 23:06:18,463 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 23:06:18,464 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 23:06:18,471 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,573 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,669 INFO L137 Inliner]: procedures = 218, calls = 1862, calls flagged for inlining = 100, calls inlined = 66, statements flattened = 2985 [2022-07-22 23:06:18,670 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 23:06:18,671 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 23:06:18,671 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 23:06:18,671 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 23:06:18,679 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,680 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,696 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,697 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,825 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,848 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,873 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,899 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 23:06:18,900 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 23:06:18,902 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 23:06:18,902 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 23:06:18,903 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (1/1) ... [2022-07-22 23:06:18,910 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2022-07-22 23:06:18,921 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 23:06:18,937 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2022-07-22 23:06:18,966 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2022-07-22 23:06:18,984 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2022-07-22 23:06:18,985 INFO L130 BoogieDeclarations]: Found specification of procedure platform_driver_unregister [2022-07-22 23:06:18,985 INFO L138 BoogieDeclarations]: Found implementation of procedure platform_driver_unregister [2022-07-22 23:06:18,985 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2022-07-22 23:06:18,985 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2022-07-22 23:06:18,985 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2022-07-22 23:06:18,985 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_dev [2022-07-22 23:06:18,985 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_dev [2022-07-22 23:06:18,986 INFO L130 BoogieDeclarations]: Found specification of procedure usb_get_dev [2022-07-22 23:06:18,986 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_get_dev [2022-07-22 23:06:18,986 INFO L130 BoogieDeclarations]: Found specification of procedure get_current [2022-07-22 23:06:18,986 INFO L138 BoogieDeclarations]: Found implementation of procedure get_current [2022-07-22 23:06:18,986 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_to_hcd [2022-07-22 23:06:18,986 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_to_hcd [2022-07-22 23:06:18,986 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2022-07-22 23:06:18,987 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2022-07-22 23:06:18,987 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2022-07-22 23:06:18,987 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2022-07-22 23:06:18,987 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2022-07-22 23:06:18,987 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2022-07-22 23:06:18,987 INFO L130 BoogieDeclarations]: Found specification of procedure spinlock_check [2022-07-22 23:06:18,987 INFO L138 BoogieDeclarations]: Found implementation of procedure spinlock_check [2022-07-22 23:06:18,988 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_giveback_urb [2022-07-22 23:06:18,988 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_giveback_urb [2022-07-22 23:06:18,988 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2022-07-22 23:06:18,988 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2022-07-22 23:06:18,988 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2022-07-22 23:06:18,988 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2022-07-22 23:06:18,988 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_is_err [2022-07-22 23:06:18,988 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_is_err [2022-07-22 23:06:18,989 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irqrestore [2022-07-22 23:06:18,989 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irqrestore [2022-07-22 23:06:18,989 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2022-07-22 23:06:18,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2022-07-22 23:06:18,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2022-07-22 23:06:18,990 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2022-07-22 23:06:18,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2022-07-22 23:06:18,990 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2022-07-22 23:06:18,990 INFO L130 BoogieDeclarations]: Found specification of procedure trace_kmalloc [2022-07-22 23:06:18,990 INFO L138 BoogieDeclarations]: Found implementation of procedure trace_kmalloc [2022-07-22 23:06:18,990 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_event_add [2022-07-22 23:06:18,991 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_event_add [2022-07-22 23:06:18,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2022-07-22 23:06:18,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2022-07-22 23:06:18,991 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2022-07-22 23:06:18,991 INFO L130 BoogieDeclarations]: Found specification of procedure list_del [2022-07-22 23:06:18,992 INFO L138 BoogieDeclarations]: Found implementation of procedure list_del [2022-07-22 23:06:18,992 INFO L130 BoogieDeclarations]: Found specification of procedure kzalloc [2022-07-22 23:06:18,993 INFO L138 BoogieDeclarations]: Found implementation of procedure kzalloc [2022-07-22 23:06:18,993 INFO L130 BoogieDeclarations]: Found specification of procedure _raw_spin_lock_irqsave [2022-07-22 23:06:18,994 INFO L138 BoogieDeclarations]: Found implementation of procedure _raw_spin_lock_irqsave [2022-07-22 23:06:18,994 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock [2022-07-22 23:06:18,994 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock [2022-07-22 23:06:18,995 INFO L130 BoogieDeclarations]: Found specification of procedure usb_put_hcd [2022-07-22 23:06:18,995 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_put_hcd [2022-07-22 23:06:18,995 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_handler_precall [2022-07-22 23:06:18,995 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_handler_precall [2022-07-22 23:06:18,996 INFO L130 BoogieDeclarations]: Found specification of procedure dev_get_drvdata [2022-07-22 23:06:18,996 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_get_drvdata [2022-07-22 23:06:18,996 INFO L130 BoogieDeclarations]: Found specification of procedure __raw_spin_lock_init [2022-07-22 23:06:18,996 INFO L138 BoogieDeclarations]: Found implementation of procedure __raw_spin_lock_init [2022-07-22 23:06:18,997 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_unlink_urb_from_ep [2022-07-22 23:06:18,997 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_unlink_urb_from_ep [2022-07-22 23:06:18,997 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_initialize [2022-07-22 23:06:18,997 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_initialize [2022-07-22 23:06:18,997 INFO L130 BoogieDeclarations]: Found specification of procedure dump_port_status [2022-07-22 23:06:18,997 INFO L138 BoogieDeclarations]: Found implementation of procedure dump_port_status [2022-07-22 23:06:18,997 INFO L130 BoogieDeclarations]: Found specification of procedure port_to_vdev [2022-07-22 23:06:18,998 INFO L138 BoogieDeclarations]: Found implementation of procedure port_to_vdev [2022-07-22 23:06:18,998 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2022-07-22 23:06:18,999 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2022-07-22 23:06:18,999 INFO L130 BoogieDeclarations]: Found specification of procedure list_add_tail [2022-07-22 23:06:18,999 INFO L138 BoogieDeclarations]: Found implementation of procedure list_add_tail [2022-07-22 23:06:18,999 INFO L130 BoogieDeclarations]: Found specification of procedure spin_unlock_irq [2022-07-22 23:06:18,999 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_unlock_irq [2022-07-22 23:06:18,999 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2022-07-22 23:06:18,999 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2022-07-22 23:06:19,000 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_dev [2022-07-22 23:06:19,000 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_dev [2022-07-22 23:06:19,000 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2022-07-22 23:06:19,000 INFO L130 BoogieDeclarations]: Found specification of procedure usb_hcd_poll_rh_status [2022-07-22 23:06:19,000 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_hcd_poll_rh_status [2022-07-22 23:06:19,000 INFO L130 BoogieDeclarations]: Found specification of procedure kmem_cache_alloc_notrace [2022-07-22 23:06:19,001 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 23:06:19,001 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2022-07-22 23:06:19,001 INFO L130 BoogieDeclarations]: Found specification of procedure __bad_percpu_size [2022-07-22 23:06:19,002 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock_irq [2022-07-22 23:06:19,002 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock_irq [2022-07-22 23:06:19,002 INFO L130 BoogieDeclarations]: Found specification of procedure current_thread_info [2022-07-22 23:06:19,003 INFO L138 BoogieDeclarations]: Found implementation of procedure current_thread_info [2022-07-22 23:06:19,003 INFO L130 BoogieDeclarations]: Found specification of procedure rcu_read_lock_sched_notrace [2022-07-22 23:06:19,003 INFO L138 BoogieDeclarations]: Found implementation of procedure rcu_read_lock_sched_notrace [2022-07-22 23:06:19,003 INFO L130 BoogieDeclarations]: Found specification of procedure __wake_up [2022-07-22 23:06:19,004 INFO L138 BoogieDeclarations]: Found implementation of procedure __wake_up [2022-07-22 23:06:19,004 INFO L130 BoogieDeclarations]: Found specification of procedure hcd_to_vhci [2022-07-22 23:06:19,004 INFO L138 BoogieDeclarations]: Found implementation of procedure hcd_to_vhci [2022-07-22 23:06:19,004 INFO L130 BoogieDeclarations]: Found specification of procedure atomic_add_return [2022-07-22 23:06:19,004 INFO L138 BoogieDeclarations]: Found implementation of procedure atomic_add_return [2022-07-22 23:06:19,004 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2022-07-22 23:06:19,005 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2022-07-22 23:06:19,005 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_put_dev [2022-07-22 23:06:19,005 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_put_dev [2022-07-22 23:06:19,005 INFO L130 BoogieDeclarations]: Found specification of procedure vhci_dev [2022-07-22 23:06:19,005 INFO L138 BoogieDeclarations]: Found implementation of procedure vhci_dev [2022-07-22 23:06:19,005 INFO L130 BoogieDeclarations]: Found specification of procedure spin_lock [2022-07-22 23:06:19,006 INFO L138 BoogieDeclarations]: Found implementation of procedure spin_lock [2022-07-22 23:06:19,006 INFO L130 BoogieDeclarations]: Found specification of procedure dev_name [2022-07-22 23:06:19,006 INFO L138 BoogieDeclarations]: Found implementation of procedure dev_name [2022-07-22 23:06:19,006 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_check_final_state [2022-07-22 23:06:19,006 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_check_final_state [2022-07-22 23:06:19,007 INFO L130 BoogieDeclarations]: Found specification of procedure usbip_task_init [2022-07-22 23:06:19,007 INFO L138 BoogieDeclarations]: Found implementation of procedure usbip_task_init [2022-07-22 23:06:19,010 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 23:06:19,010 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 23:06:19,555 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 23:06:19,560 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 23:06:32,117 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 23:06:32,132 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 23:06:32,132 INFO L299 CfgBuilder]: Removed 0 assume(true) statements. [2022-07-22 23:06:32,136 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 11:06:32 BoogieIcfgContainer [2022-07-22 23:06:32,136 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 23:06:32,138 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2022-07-22 23:06:32,138 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2022-07-22 23:06:32,142 INFO L275 PluginConnector]: TraceAbstraction initialized [2022-07-22 23:06:32,142 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 22.07 11:06:15" (1/3) ... [2022-07-22 23:06:32,143 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14c0020 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 11:06:32, skipping insertion in model container [2022-07-22 23:06:32,143 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 11:06:18" (2/3) ... [2022-07-22 23:06:32,143 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@14c0020 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 22.07 11:06:32, skipping insertion in model container [2022-07-22 23:06:32,144 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 11:06:32" (3/3) ... [2022-07-22 23:06:32,145 INFO L111 eAbstractionObserver]: Analyzing ICFG main3_drivers-staging-usbip-vhci-hcd-ko--132_1a--927c3fa.i [2022-07-22 23:06:32,157 INFO L201 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2022-07-22 23:06:32,157 INFO L160 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2022-07-22 23:06:32,226 INFO L356 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2022-07-22 23:06:32,233 INFO L357 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mPorIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@37201c13, mLbeIndependenceSettings=de.uni_freiburg.informatik.ultimate.lib.tracecheckerutils.partialorder.independence.IndependenceSettings@75bd029a [2022-07-22 23:06:32,233 INFO L358 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2022-07-22 23:06:32,241 INFO L276 IsEmpty]: Start isEmpty. Operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) [2022-07-22 23:06:32,250 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 20 [2022-07-22 23:06:32,250 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:32,251 INFO L195 NwaCegarLoop]: trace histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:32,252 INFO L420 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:32,259 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:32,259 INFO L85 PathProgramCache]: Analyzing trace with hash 1287876963, now seen corresponding path program 1 times [2022-07-22 23:06:32,276 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-22 23:06:32,277 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1078787581] [2022-07-22 23:06:32,277 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:32,278 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-22 23:06:32,278 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-22 23:06:32,283 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-22 23:06:32,327 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2022-07-22 23:06:33,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:33,449 INFO L263 TraceCheckSpWp]: Trace formula consists of 1795 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-22 23:06:33,454 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 23:06:33,597 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 23:06:33,597 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 23:06:33,598 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-22 23:06:33,599 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1078787581] [2022-07-22 23:06:33,599 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1078787581] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 23:06:33,599 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 23:06:33,599 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [] total 2 [2022-07-22 23:06:33,601 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1108438342] [2022-07-22 23:06:33,602 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 23:06:33,606 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2022-07-22 23:06:33,606 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-22 23:06:33,629 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 23:06:33,630 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 23:06:33,634 INFO L87 Difference]: Start difference. First operand has 893 states, 640 states have (on average 1.3421875) internal successors, (859), 650 states have internal predecessors, (859), 205 states have call successors, (205), 46 states have call predecessors, (205), 46 states have return successors, (205), 204 states have call predecessors, (205), 205 states have call successors, (205) Second operand has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 23:06:33,881 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 23:06:33,882 INFO L93 Difference]: Finished difference Result 2459 states and 3506 transitions. [2022-07-22 23:06:33,883 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 23:06:33,885 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) Word has length 19 [2022-07-22 23:06:33,886 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 23:06:33,910 INFO L225 Difference]: With dead ends: 2459 [2022-07-22 23:06:33,910 INFO L226 Difference]: Without dead ends: 1570 [2022-07-22 23:06:33,924 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 18 GetRequests, 17 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 23:06:33,930 INFO L413 NwaCegarLoop]: 1360 mSDtfsCounter, 1123 mSDsluCounter, 1096 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1123 SdHoareTripleChecker+Valid, 2456 SdHoareTripleChecker+Invalid, 23 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2022-07-22 23:06:33,932 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1123 Valid, 2456 Invalid, 23 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2022-07-22 23:06:33,954 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2022-07-22 23:06:34,112 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 1567. [2022-07-22 23:06:34,118 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.306787330316742) internal successors, (1444), 1117 states have internal predecessors, (1444), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-22 23:06:34,132 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2198 transitions. [2022-07-22 23:06:34,136 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2198 transitions. Word has length 19 [2022-07-22 23:06:34,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 23:06:34,137 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2198 transitions. [2022-07-22 23:06:34,138 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 4.333333333333333) internal successors, (13), 2 states have internal predecessors, (13), 2 states have call successors, (4), 2 states have call predecessors, (4), 1 states have return successors, (2), 1 states have call predecessors, (2), 1 states have call successors, (2) [2022-07-22 23:06:34,138 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2198 transitions. [2022-07-22 23:06:34,154 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 64 [2022-07-22 23:06:34,155 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:34,155 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:34,196 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2022-07-22 23:06:34,371 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-22 23:06:34,372 INFO L420 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:34,372 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:34,372 INFO L85 PathProgramCache]: Analyzing trace with hash -619409099, now seen corresponding path program 1 times [2022-07-22 23:06:34,377 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-22 23:06:34,378 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2134851354] [2022-07-22 23:06:34,378 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:34,378 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-22 23:06:34,379 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-22 23:06:34,380 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-22 23:06:34,383 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2022-07-22 23:06:35,439 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:35,496 INFO L263 TraceCheckSpWp]: Trace formula consists of 1912 conjuncts, 3 conjunts are in the unsatisfiable core [2022-07-22 23:06:35,500 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 23:06:35,548 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 23:06:35,549 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 23:06:35,549 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-22 23:06:35,549 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2134851354] [2022-07-22 23:06:35,549 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2134851354] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 23:06:35,550 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 23:06:35,550 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 23:06:35,550 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [477170] [2022-07-22 23:06:35,550 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 23:06:35,552 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2022-07-22 23:06:35,552 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-22 23:06:35,553 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 23:06:35,553 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 23:06:35,554 INFO L87 Difference]: Start difference. First operand 1567 states and 2198 transitions. Second operand has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:35,722 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 23:06:35,722 INFO L93 Difference]: Finished difference Result 3093 states and 4339 transitions. [2022-07-22 23:06:35,723 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2022-07-22 23:06:35,723 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 63 [2022-07-22 23:06:35,724 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 23:06:35,734 INFO L225 Difference]: With dead ends: 3093 [2022-07-22 23:06:35,734 INFO L226 Difference]: Without dead ends: 1567 [2022-07-22 23:06:35,741 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 63 GetRequests, 60 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2022-07-22 23:06:35,742 INFO L413 NwaCegarLoop]: 1156 mSDtfsCounter, 1 mSDsluCounter, 2306 mSDsCounter, 0 mSdLazyCounter, 8 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1 SdHoareTripleChecker+Valid, 3462 SdHoareTripleChecker+Invalid, 8 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 8 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 23:06:35,743 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [1 Valid, 3462 Invalid, 8 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 8 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 23:06:35,746 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1567 states. [2022-07-22 23:06:35,800 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1567 to 1567. [2022-07-22 23:06:35,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1567 states, 1105 states have (on average 1.3058823529411765) internal successors, (1443), 1117 states have internal predecessors, (1443), 379 states have call successors, (379), 85 states have call predecessors, (379), 82 states have return successors, (375), 371 states have call predecessors, (375), 373 states have call successors, (375) [2022-07-22 23:06:35,814 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1567 states to 1567 states and 2197 transitions. [2022-07-22 23:06:35,815 INFO L78 Accepts]: Start accepts. Automaton has 1567 states and 2197 transitions. Word has length 63 [2022-07-22 23:06:35,816 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 23:06:35,816 INFO L495 AbstractCegarLoop]: Abstraction has 1567 states and 2197 transitions. [2022-07-22 23:06:35,816 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 11.25) internal successors, (45), 4 states have internal predecessors, (45), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:35,817 INFO L276 IsEmpty]: Start isEmpty. Operand 1567 states and 2197 transitions. [2022-07-22 23:06:35,821 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 68 [2022-07-22 23:06:35,821 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:35,822 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:35,865 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2022-07-22 23:06:36,039 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-22 23:06:36,039 INFO L420 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:36,040 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:36,040 INFO L85 PathProgramCache]: Analyzing trace with hash 1833716892, now seen corresponding path program 1 times [2022-07-22 23:06:36,043 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-22 23:06:36,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [97528156] [2022-07-22 23:06:36,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:36,045 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-22 23:06:36,045 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-22 23:06:36,050 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-22 23:06:36,056 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2022-07-22 23:06:37,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 23:06:37,090 INFO L263 TraceCheckSpWp]: Trace formula consists of 1919 conjuncts, 4 conjunts are in the unsatisfiable core [2022-07-22 23:06:37,094 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 23:06:37,155 INFO L134 CoverageAnalysis]: Checked inductivity of 2 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 23:06:37,156 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2022-07-22 23:06:37,156 INFO L136 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2022-07-22 23:06:37,156 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [97528156] [2022-07-22 23:06:37,156 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleMathsat [97528156] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 23:06:37,156 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 23:06:37,157 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 23:06:37,157 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [541920971] [2022-07-22 23:06:37,157 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 23:06:37,158 INFO L571 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2022-07-22 23:06:37,158 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2022-07-22 23:06:37,158 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 23:06:37,159 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 23:06:37,159 INFO L87 Difference]: Start difference. First operand 1567 states and 2197 transitions. Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:37,310 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 23:06:37,311 INFO L93 Difference]: Finished difference Result 3093 states and 4338 transitions. [2022-07-22 23:06:37,311 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 23:06:37,312 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) Word has length 67 [2022-07-22 23:06:37,312 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2022-07-22 23:06:37,320 INFO L225 Difference]: With dead ends: 3093 [2022-07-22 23:06:37,321 INFO L226 Difference]: Without dead ends: 1555 [2022-07-22 23:06:37,329 INFO L412 NwaCegarLoop]: 0 DeclaredPredicates, 68 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2022-07-22 23:06:37,333 INFO L413 NwaCegarLoop]: 1154 mSDtfsCounter, 9 mSDsluCounter, 3441 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 12 SdHoareTripleChecker+Valid, 4595 SdHoareTripleChecker+Invalid, 16 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2022-07-22 23:06:37,334 INFO L414 NwaCegarLoop]: SdHoareTripleChecker [12 Valid, 4595 Invalid, 16 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2022-07-22 23:06:37,337 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1555 states. [2022-07-22 23:06:37,388 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1555 to 1555. [2022-07-22 23:06:37,391 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1555 states, 1097 states have (on average 1.3044667274384685) internal successors, (1431), 1108 states have internal predecessors, (1431), 376 states have call successors, (376), 84 states have call predecessors, (376), 81 states have return successors, (372), 368 states have call predecessors, (372), 370 states have call successors, (372) [2022-07-22 23:06:37,401 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1555 states to 1555 states and 2179 transitions. [2022-07-22 23:06:37,403 INFO L78 Accepts]: Start accepts. Automaton has 1555 states and 2179 transitions. Word has length 67 [2022-07-22 23:06:37,403 INFO L84 Accepts]: Finished accepts. word is rejected. [2022-07-22 23:06:37,403 INFO L495 AbstractCegarLoop]: Abstraction has 1555 states and 2179 transitions. [2022-07-22 23:06:37,404 INFO L496 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 2 states have call successors, (10), 2 states have call predecessors, (10), 2 states have return successors, (8), 2 states have call predecessors, (8), 2 states have call successors, (8) [2022-07-22 23:06:37,404 INFO L276 IsEmpty]: Start isEmpty. Operand 1555 states and 2179 transitions. [2022-07-22 23:06:37,408 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 70 [2022-07-22 23:06:37,408 INFO L187 NwaCegarLoop]: Found error trace [2022-07-22 23:06:37,409 INFO L195 NwaCegarLoop]: trace histogram [2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 23:06:37,446 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2022-07-22 23:06:37,631 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-22 23:06:37,632 INFO L420 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2022-07-22 23:06:37,632 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 23:06:37,632 INFO L85 PathProgramCache]: Analyzing trace with hash 688026883, now seen corresponding path program 1 times [2022-07-22 23:06:37,635 INFO L118 FreeRefinementEngine]: Executing refinement strategy WOLF [2022-07-22 23:06:37,636 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1401936328] [2022-07-22 23:06:37,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 23:06:37,636 INFO L173 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2022-07-22 23:06:37,636 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2022-07-22 23:06:37,638 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2022-07-22 23:06:37,640 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2022-07-22 23:06:58,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 23:06:58,065 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-22 23:07:18,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 23:07:19,885 INFO L130 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2022-07-22 23:07:19,886 INFO L271 BasicCegarLoop]: Counterexample is feasible [2022-07-22 23:07:19,887 INFO L805 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2022-07-22 23:07:19,948 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2022-07-22 23:07:20,100 WARN L477 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2022-07-22 23:07:20,104 INFO L356 BasicCegarLoop]: Path program histogram: [1, 1, 1, 1] [2022-07-22 23:07:20,107 INFO L176 ceAbstractionStarter]: Computing trace abstraction results [2022-07-22 23:07:20,260 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 22.07 11:07:20 BoogieIcfgContainer [2022-07-22 23:07:20,260 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2022-07-22 23:07:20,261 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-22 23:07:20,261 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-22 23:07:20,261 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-22 23:07:20,262 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 11:06:32" (3/4) ... [2022-07-22 23:07:20,275 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-22 23:07:20,278 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-22 23:07:20,279 INFO L158 Benchmark]: Toolchain (without parser) took 64882.95ms. Allocated memory was 60.8MB in the beginning and 591.4MB in the end (delta: 530.6MB). Free memory was 35.0MB in the beginning and 504.8MB in the end (delta: -469.8MB). Peak memory consumption was 60.8MB. Max. memory is 16.1GB. [2022-07-22 23:07:20,280 INFO L158 Benchmark]: CDTParser took 0.26ms. Allocated memory is still 50.3MB. Free memory was 31.6MB in the beginning and 31.5MB in the end (delta: 52.5kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 23:07:20,282 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3062.55ms. Allocated memory was 60.8MB in the beginning and 165.7MB in the end (delta: 104.9MB). Free memory was 34.8MB in the beginning and 87.9MB in the end (delta: -53.1MB). Peak memory consumption was 80.9MB. Max. memory is 16.1GB. [2022-07-22 23:07:20,282 INFO L158 Benchmark]: Boogie Procedure Inliner took 206.81ms. Allocated memory is still 165.7MB. Free memory was 87.9MB in the beginning and 70.2MB in the end (delta: 17.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. [2022-07-22 23:07:20,283 INFO L158 Benchmark]: Boogie Preprocessor took 228.72ms. Allocated memory is still 165.7MB. Free memory was 70.2MB in the beginning and 89.1MB in the end (delta: -18.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. [2022-07-22 23:07:20,283 INFO L158 Benchmark]: RCFGBuilder took 13236.45ms. Allocated memory was 165.7MB in the beginning and 331.4MB in the end (delta: 165.7MB). Free memory was 89.1MB in the beginning and 119.3MB in the end (delta: -30.2MB). Peak memory consumption was 137.5MB. Max. memory is 16.1GB. [2022-07-22 23:07:20,283 INFO L158 Benchmark]: TraceAbstraction took 48122.38ms. Allocated memory was 331.4MB in the beginning and 591.4MB in the end (delta: 260.0MB). Free memory was 119.3MB in the beginning and 504.8MB in the end (delta: -385.5MB). Peak memory consumption was 112.4MB. Max. memory is 16.1GB. [2022-07-22 23:07:20,284 INFO L158 Benchmark]: Witness Printer took 17.54ms. Allocated memory is still 591.4MB. Free memory is still 504.8MB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-22 23:07:20,285 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.26ms. Allocated memory is still 50.3MB. Free memory was 31.6MB in the beginning and 31.5MB in the end (delta: 52.5kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3062.55ms. Allocated memory was 60.8MB in the beginning and 165.7MB in the end (delta: 104.9MB). Free memory was 34.8MB in the beginning and 87.9MB in the end (delta: -53.1MB). Peak memory consumption was 80.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 206.81ms. Allocated memory is still 165.7MB. Free memory was 87.9MB in the beginning and 70.2MB in the end (delta: 17.7MB). Peak memory consumption was 16.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 228.72ms. Allocated memory is still 165.7MB. Free memory was 70.2MB in the beginning and 89.1MB in the end (delta: -18.9MB). Peak memory consumption was 12.6MB. Max. memory is 16.1GB. * RCFGBuilder took 13236.45ms. Allocated memory was 165.7MB in the beginning and 331.4MB in the end (delta: 165.7MB). Free memory was 89.1MB in the beginning and 119.3MB in the end (delta: -30.2MB). Peak memory consumption was 137.5MB. Max. memory is 16.1GB. * TraceAbstraction took 48122.38ms. Allocated memory was 331.4MB in the beginning and 591.4MB in the end (delta: 260.0MB). Free memory was 119.3MB in the beginning and 504.8MB in the end (delta: -385.5MB). Peak memory consumption was 112.4MB. Max. memory is 16.1GB. * Witness Printer took 17.54ms. Allocated memory is still 591.4MB. Free memory is still 504.8MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8157]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6448. Possible FailurePath: [L4883-L4884] static struct device_attribute dev_attr_status = {{"status", 292U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, & show_status, 0}; [L4978-L4979] static struct device_attribute dev_attr_detach = {{"detach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_detach}; [L5100-L5101] static struct device_attribute dev_attr_attach = {{"attach", 128U, 0, {{{(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}, {(char)0}}}}, 0, & store_attach}; [L5102-L5103] static struct attribute *dev_attrs[5U] = { & dev_attr_status.attr, & dev_attr_detach.attr, & dev_attr_attach.attr, & dev_attr_usbip_debug.attr, 0}; [L5104] struct attribute_group dev_attr_group = {0, 0, (struct attribute **)(& dev_attrs)}; [L5108] int LDV_IN_INTERRUPT ; [L6410] struct vhci_hcd *the_controller ; [L6434-L6437] static char const driver_name[9U] = { 'v', 'h', 'c', 'i', '_', 'h', 'c', 'd', '\000'}; [L6438-L6446] static char const driver_desc[31U] = { 'U', 'S', 'B', '/', 'I', 'P', ' ', 'V', 'i', 'r', 't', 'u', 'a', 'l', ' ', 'H', 'o', 's', 't', ' ', 'C', 'o', 'n', 't', 'r', 'o', 'l', 'l', 'e', 'r', '\000'}; [L6447-L6455] static char const *bit_desc[32U] = { "CONNECTION", "ENABLE", "SUSPEND", "OVER_CURRENT", "RESET", "R5", "R6", "R7", "POWER", "LOWSPEED", "HIGHSPEED", "PORT_TEST", "INDICATOR", "R13", "R14", "R15", "C_CONNECTION", "C_ENABLE", "C_SUSPEND", "C_OVER_CURRENT", "C_RESET", "R21", "R22", "R23", "R24", "R25", "R26", "R27", "R28", "R29", "R30", "R31"}; [L7632-L7636] static struct hc_driver vhci_hc_driver = {(char const *)(& driver_name), (char const *)(& driver_desc), 6664UL, 0, 32, 0, & vhci_start, 0, 0, & vhci_stop, 0, & vhci_get_frame_number, & vhci_urb_enqueue, & vhci_urb_dequeue, 0, 0, & vhci_hub_status, & vhci_hub_control, & vhci_bus_suspend, & vhci_bus_resume, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; [L7792-L7794] static struct platform_driver vhci_driver = {& vhci_hcd_probe, & vhci_hcd_remove, 0, & vhci_hcd_suspend, & vhci_hcd_resume, {(char const *)(& driver_name), 0, & __this_module, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}; [L7801-L7857] static struct platform_device the_pdev = {(char const *)(& driver_name), -1, {0, 0, {0, {0, 0}, 0, 0, 0, 0, {{0}}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0}, 0, 0, {{0}, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, 0, 0, 0, {0, {0, 0}, 0, 0, 0UL}}, 0, 0, 0, {{0}, (unsigned char)0, (unsigned char)0, 0, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0U, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}}, 0, {{0, 0}, 0UL, 0, 0, 0UL, 0, 0, {(char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0, (char)0}, 0, {0, {0, 0}, 0, 0, 0UL}}, 0UL, {{0L}, {0, 0}, 0, {0, {0, 0}, 0, 0, 0UL}}, {{{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {0}, {0}, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0, 0, 0, 0, 0UL, 0UL, 0UL, 0UL}, 0, 0, 0ULL, 0, {0, 0}, 0, {0, 0, 0}, 0U, {{{{0U}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}, {0, {0, 0}, {{0}}}, 0, 0, & the_pdev_release}, 0U, 0, 0, {}}; [L8202] int ldv_usb_dev_state = 0; VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7974] struct usb_hcd *var_group1 ; [L7975] struct urb *var_group2 ; [L7976] gfp_t var_vhci_urb_enqueue_8_p2 ; [L7977] int var_vhci_urb_dequeue_9_p2 ; [L7978] char *var_vhci_hub_status_3_p1 ; [L7979] u16 var_vhci_hub_control_5_p1 ; [L7980] u16 var_vhci_hub_control_5_p2 ; [L7981] u16 var_vhci_hub_control_5_p3 ; [L7982] char *var_vhci_hub_control_5_p4 ; [L7983] u16 var_vhci_hub_control_5_p5 ; [L7984] struct platform_device *var_group3 ; [L7985] int res_vhci_hcd_probe_20 ; [L7986] pm_message_t var_vhci_hcd_suspend_22_p1 ; [L7987] struct device *var_group4 ; [L7988] int ldv_s_vhci_driver_platform_driver ; [L7989] int ldv_s_the_pdev_platform_device ; [L7990] int tmp ; [L7991] int tmp___0 ; [L7992] int tmp___1 ; [L7994] ldv_s_vhci_driver_platform_driver = 0 [L7995] ldv_s_the_pdev_platform_device = 0 [L7996] LDV_IN_INTERRUPT = 1 VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7997] FCALL ldv_initialize() VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7998] FCALL ldv_handler_precall() VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] CALL, EXPR vhci_init() [L7860] int ret ; [L7861] struct task_struct *tmp___0 ; [L7862] char *tmp___1 ; [L7863] struct thread_info *tmp___2 ; [L7864] int tmp___3 ; [L7865] struct task_struct *tmp___5 ; [L7866] char *tmp___6 ; [L7867] struct thread_info *tmp___7 ; [L7868] struct task_struct *tmp___9 ; [L7869] char *tmp___10 ; [L7870] struct thread_info *tmp___11 ; VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7872] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7884] CALL, EXPR usb_disabled() [L8396] return __VERIFIER_nondet_int(); [L7884] RET, EXPR usb_disabled() [L7884] tmp___3 = usb_disabled() [L7885] COND FALSE !(tmp___3 != 0) [L7890] CALL, EXPR platform_driver_register(& vhci_driver) [L8359] return __VERIFIER_nondet_int(); [L7890] RET, EXPR platform_driver_register(& vhci_driver) [L7890] ret = platform_driver_register(& vhci_driver) [L7891] COND FALSE !(ret < 0) [L7895] CALL, EXPR platform_device_register(& the_pdev) [L8352] return __VERIFIER_nondet_int(); [L7895] RET, EXPR platform_device_register(& the_pdev) [L7895] ret = platform_device_register(& the_pdev) [L7896] COND FALSE !(ret < 0) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7900] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7912] return (ret); VAL [\result=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7999] RET, EXPR vhci_init() [L7999] tmp = vhci_init() [L8000] COND FALSE !(tmp != 0) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8095] tmp___1 = __VERIFIER_nondet_int() [L8096] COND TRUE (tmp___1 != 0 || ldv_s_vhci_driver_platform_driver != 0) || ldv_s_the_pdev_platform_device != 0 VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___1=2147483648, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8006] tmp___0 = __VERIFIER_nondet_int() [L8008] case 0: [L8012] case 1: [L8016] case 2: VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=2147483648, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8017] FCALL ldv_handler_precall() VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_s_the_pdev_platform_device=0, ldv_s_vhci_driver_platform_driver=0, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, tmp=0, tmp___0=2, tmp___1=2147483648, usbip_debug_flag=0, var_vhci_hcd_suspend_22_p1={398:0}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8018] CALL vhci_urb_enqueue(var_group1, var_group2, var_vhci_urb_enqueue_8_p2) [L7087] struct device *dev ; [L7088] int ret ; [L7089] unsigned long flags ; [L7090] struct task_struct *tmp___0 ; [L7091] char *tmp___1 ; [L7092] struct thread_info *tmp___2 ; [L7093] long tmp___3 ; [L7094] long tmp___4 ; [L7095] raw_spinlock_t *tmp___5 ; [L7096] __u8 type ; [L7097] struct usb_ctrlrequest *ctrlreq ; [L7098] struct vhci_device *vdev ; [L7099] struct vhci_device *tmp___6 ; [L7100] struct task_struct *tmp___8 ; [L7101] char *tmp___9 ; [L7102] struct thread_info *tmp___10 ; [L7103] struct usb_hcd *tmp___11 ; [L7105] EXPR urb->dev [L7105] dev = & (urb->dev)->dev [L7106] ret = 0 VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7107] COND FALSE !((usbip_debug_flag & 512UL) != 0UL) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120] EXPR urb->transfer_buffer VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->transfer_buffer={-1152921513230336000:-1152921513163227136}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] CALL, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(c)=0, \old(exp)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8163] return (exp); VAL [\old(c)=0, \old(exp)=0, \result=0, __this_module={4398046511104:4096}, bit_desc={372:0}, c=0, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, exp=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] RET, EXPR ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L)=0, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->transfer_buffer={-1152921513230336000:-1152921513163227136}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7120-L7121] tmp___3 = ldv__builtin_expect((unsigned long )urb->transfer_buffer == (unsigned long )((void *)0), 0L) [L7122] COND FALSE !(tmp___3 != 0L) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] CALL, EXPR spinlock_check(& the_controller->lock) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L5188] return (& lock->ldv_5812.rlock); VAL [\result={0:0}, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, lock={0:0}, lock={0:0}, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] RET, EXPR spinlock_check(& the_controller->lock) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, spinlock_check(& the_controller->lock)={0:0}, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7133] tmp___5 = spinlock_check(& the_controller->lock) [L7134] CALL, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [__this_module={4398046511104:4096}, arg0={0:0}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8294] return __VERIFIER_nondet_ulong(); [L7134] RET, EXPR _raw_spin_lock_irqsave(tmp___5) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, _raw_spin_lock_irqsave(tmp___5)=394, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7134] flags = _raw_spin_lock_irqsave(tmp___5) [L7135] EXPR urb->status VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->status=-115, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7135] COND FALSE !(urb->status != -115) [L7141] CALL, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L8410] return __VERIFIER_nondet_int(); [L7141] RET, EXPR usb_hcd_link_urb_to_ep(hcd, urb) [L7141] ret = usb_hcd_link_urb_to_ep(hcd, urb) [L7142] COND FALSE !(ret != 0) [L7146] EXPR urb->pipe VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, urb->pipe=-2147483648, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7146] COND TRUE ((urb->pipe >> 8) & 127U) == 0U [L7147] EXPR urb->pipe [L7147] type = (__u8 )(urb->pipe >> 30) [L7148] EXPR urb->setup_packet [L7148] ctrlreq = (struct usb_ctrlrequest *)urb->setup_packet [L7149] EXPR the_controller->pending_port VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_controller->pending_port=-2147483535, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] CALL, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(port)=2147483761, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L4809] return ((struct vhci_device *)(& the_controller->vdev) + (unsigned long )port); VAL [\old(port)=2147483761, \result={0:1597727918293}, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, port=2147483761, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] RET, EXPR port_to_vdev((__u32 )the_controller->pending_port) VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, port_to_vdev((__u32 )the_controller->pending_port)={0:1597727918293}, ret=0, the_controller={0:0}, the_controller->pending_port=-2147483535, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7149] tmp___6 = port_to_vdev((__u32 )the_controller->pending_port) [L7150] vdev = tmp___6 VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:1597727918293}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vdev={0:1597727918293}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7151] COND FALSE !((unsigned int )type != 2U || (unsigned long )ctrlreq == (unsigned long )((struct usb_ctrlrequest *)0)) [L7157] ctrlreq->bRequest [L7158] case 5: [L7160] ctrlreq->wValue [L7160] vdev->rhport [L7161] EXPR vdev->udev VAL [\old(mem_flags)=9, __this_module={4398046511104:4096}, bit_desc={372:0}, ctrlreq={-4611686018427387904:-4611686018427387904}, ctrlreq->bRequest=5, dev={0:3}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, flags=394, hcd={393:392}, hcd={393:392}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, mem_flags=9, ret=0, the_controller={0:0}, the_pdev={375:0}, tmp___3=0, tmp___5={0:0}, tmp___6={0:1597727918293}, type=2, urb={0:-8067547855910338688}, urb={0:-8067547855910338688}, usbip_debug_flag=0, vdev={0:1597727918293}, vdev->udev={-4429993903243894720:-181692115183493184}, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L7161] COND TRUE (unsigned long )vdev->udev != (unsigned long )((struct usb_device *)0) [L7162] EXPR vdev->udev [L7162] CALL ldv_usb_put_dev_21(vdev->udev) [L8111] FCALL usb_put_dev(ldv_func_arg1) VAL [__this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, ldv_func_arg1={-4429993903243894720:-181692115183493184}, ldv_func_arg1={-4429993903243894720:-181692115183493184}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8112] CALL ldv_usb_put_dev() VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8227] COND FALSE !(ldv_usb_dev_state >= 2) VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8229] CALL ldv_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] [L8157] reach_error() VAL [\old(ldv_usb_dev_state)=0, __this_module={4398046511104:4096}, bit_desc={372:0}, dev_attr_attach={367:0}, dev_attr_detach={366:0}, dev_attr_group={369:0}, dev_attr_status={365:0}, dev_attr_usbip_debug={512:0}, dev_attrs={368:0}, driver_desc={371:0}, driver_name={370:0}, LDV_IN_INTERRUPT=1, ldv_usb_dev_state=0, the_controller={0:0}, the_pdev={375:0}, usbip_debug_flag=0, vhci_driver={374:0}, vhci_hc_driver={373:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 47 procedures, 893 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 47.9s, OverallIterations: 4, TraceHistogramMax: 2, PathProgramHistogramMax: 1, EmptinessCheckTime: 0.0s, AutomataDifference: 0.7s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 1136 SdHoareTripleChecker+Valid, 0.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 1133 mSDsluCounter, 10513 SdHoareTripleChecker+Invalid, 0.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 6843 mSDsCounter, 7 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 40 IncrementalHoareTripleChecker+Invalid, 47 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 7 mSolverCounterUnsat, 3670 mSDtfsCounter, 40 mSolverCounterSat, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 149 GetRequests, 140 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=1567occurred in iteration=1, InterpolantAutomatonStates: 12, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 0.3s AutomataMinimizationTime, 3 MinimizatonAttempts, 3 StatesRemovedByMinimization, 1 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.2s SsaConstructionTime, 22.4s SatisfiabilityAnalysisTime, 0.4s InterpolantComputationTime, 218 NumberOfCodeBlocks, 218 NumberOfCodeBlocksAsserted, 4 NumberOfCheckSat, 146 ConstructedInterpolants, 0 QuantifiedInterpolants, 190 SizeOfPredicates, 5 NumberOfNonLiveVariables, 5626 ConjunctsInSsa, 9 ConjunctsInUnsatCore, 3 InterpolantComputations, 3 PerfectInterpolantSequences, 4/4 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2022-07-22 23:07:20,343 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample