./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0f8a17c6 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 01:55:08,026 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 01:55:08,027 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 01:55:08,051 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 01:55:08,052 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 01:55:08,055 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 01:55:08,056 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 01:55:08,060 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 01:55:08,061 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 01:55:08,063 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 01:55:08,064 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 01:55:08,065 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 01:55:08,065 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 01:55:08,071 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 01:55:08,072 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 01:55:08,076 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 01:55:08,077 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 01:55:08,078 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 01:55:08,079 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 01:55:08,088 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 01:55:08,089 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 01:55:08,089 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 01:55:08,090 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 01:55:08,091 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 01:55:08,092 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 01:55:08,095 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 01:55:08,095 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 01:55:08,095 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 01:55:08,096 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 01:55:08,097 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 01:55:08,097 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 01:55:08,098 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 01:55:08,099 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 01:55:08,099 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 01:55:08,100 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 01:55:08,100 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 01:55:08,101 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 01:55:08,102 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 01:55:08,102 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 01:55:08,102 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 01:55:08,103 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 01:55:08,104 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-17 01:55:08,121 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 01:55:08,126 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 01:55:08,127 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 01:55:08,127 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 01:55:08,127 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 01:55:08,128 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 01:55:08,128 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 01:55:08,128 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 01:55:08,128 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 01:55:08,128 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 01:55:08,129 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-17 01:55:08,129 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 01:55:08,129 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 01:55:08,129 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 01:55:08,130 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 01:55:08,130 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 01:55:08,130 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 01:55:08,130 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 01:55:08,130 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 01:55:08,130 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 01:55:08,130 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 01:55:08,131 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:55:08,131 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 01:55:08,131 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 01:55:08,131 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 01:55:08,131 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-17 01:55:08,131 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-17 01:55:08,131 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 01:55:08,132 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 01:55:08,132 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 01:55:08,132 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 01:55:08,132 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 [2021-11-17 01:55:08,321 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 01:55:08,343 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 01:55:08,345 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 01:55:08,346 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 01:55:08,347 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 01:55:08,348 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 01:55:08,392 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2b8169ea3/75f51764b2ed4db2a90fa6cfd750ddcc/FLAG8d997c692 [2021-11-17 01:55:09,026 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 01:55:09,026 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 01:55:09,074 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2b8169ea3/75f51764b2ed4db2a90fa6cfd750ddcc/FLAG8d997c692 [2021-11-17 01:55:09,423 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2b8169ea3/75f51764b2ed4db2a90fa6cfd750ddcc [2021-11-17 01:55:09,426 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 01:55:09,426 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 01:55:09,431 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 01:55:09,432 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 01:55:09,434 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 01:55:09,435 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:55:09" (1/1) ... [2021-11-17 01:55:09,435 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@fe3dcf9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:09, skipping insertion in model container [2021-11-17 01:55:09,435 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 01:55:09" (1/1) ... [2021-11-17 01:55:09,440 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 01:55:09,529 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 01:55:10,723 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-11-17 01:55:10,757 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:55:10,778 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 01:55:11,028 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-11-17 01:55:11,042 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 01:55:11,122 INFO L208 MainTranslator]: Completed translation [2021-11-17 01:55:11,123 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11 WrapperNode [2021-11-17 01:55:11,124 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 01:55:11,125 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 01:55:11,125 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 01:55:11,125 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 01:55:11,130 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,190 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,309 INFO L137 Inliner]: procedures = 261, calls = 1811, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4507 [2021-11-17 01:55:11,310 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 01:55:11,310 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 01:55:11,310 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 01:55:11,310 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 01:55:11,317 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,317 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,372 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,373 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,453 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,465 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,487 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,509 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 01:55:11,511 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 01:55:11,511 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 01:55:11,511 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 01:55:11,512 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (1/1) ... [2021-11-17 01:55:11,518 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 01:55:11,567 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:55:11,609 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 01:55:11,688 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 01:55:11,715 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-11-17 01:55:11,715 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-11-17 01:55:11,715 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_12 [2021-11-17 01:55:11,716 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_12 [2021-11-17 01:55:11,716 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 01:55:11,716 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 01:55:11,716 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 01:55:11,716 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 01:55:11,716 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-11-17 01:55:11,716 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-11-17 01:55:11,716 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-11-17 01:55:11,717 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-11-17 01:55:11,717 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-11-17 01:55:11,717 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-11-17 01:55:11,717 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-11-17 01:55:11,717 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-11-17 01:55:11,717 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-17 01:55:11,717 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-17 01:55:11,717 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-11-17 01:55:11,718 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-11-17 01:55:11,718 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 01:55:11,718 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 01:55:11,718 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-17 01:55:11,718 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-17 01:55:11,718 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-11-17 01:55:11,718 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-11-17 01:55:11,718 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-11-17 01:55:11,719 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-11-17 01:55:11,719 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_50 [2021-11-17 01:55:11,719 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_50 [2021-11-17 01:55:11,719 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-11-17 01:55:11,719 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-11-17 01:55:11,719 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 01:55:11,719 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 01:55:11,719 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 01:55:11,720 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 01:55:11,720 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 01:55:11,720 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 01:55:11,720 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-11-17 01:55:11,720 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-11-17 01:55:11,721 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-11-17 01:55:11,721 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-11-17 01:55:11,721 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-11-17 01:55:11,721 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-11-17 01:55:11,721 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-11-17 01:55:11,721 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-11-17 01:55:11,722 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-11-17 01:55:11,722 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-11-17 01:55:11,722 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_29 [2021-11-17 01:55:11,722 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_29 [2021-11-17 01:55:11,722 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-11-17 01:55:11,722 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-11-17 01:55:11,722 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 01:55:11,722 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_27 [2021-11-17 01:55:11,723 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_27 [2021-11-17 01:55:11,723 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-11-17 01:55:11,723 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-11-17 01:55:11,724 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-11-17 01:55:11,724 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-11-17 01:55:11,724 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 01:55:11,724 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_13 [2021-11-17 01:55:11,725 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_13 [2021-11-17 01:55:11,725 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-11-17 01:55:11,725 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-11-17 01:55:11,725 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-11-17 01:55:11,725 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-11-17 01:55:11,725 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-11-17 01:55:11,725 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-11-17 01:55:11,725 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-11-17 01:55:11,726 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-11-17 01:55:11,726 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_15 [2021-11-17 01:55:11,726 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_15 [2021-11-17 01:55:11,726 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 01:55:11,726 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 01:55:11,726 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-11-17 01:55:11,726 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-11-17 01:55:11,726 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-11-17 01:55:11,727 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-11-17 01:55:11,727 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-11-17 01:55:11,727 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-11-17 01:55:11,727 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-11-17 01:55:11,728 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-11-17 01:55:11,728 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-11-17 01:55:11,728 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-11-17 01:55:11,728 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-11-17 01:55:11,728 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-11-17 01:55:11,728 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-11-17 01:55:11,728 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-11-17 01:55:11,728 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-11-17 01:55:11,729 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-11-17 01:55:11,729 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-11-17 01:55:11,729 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-11-17 01:55:11,729 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-11-17 01:55:11,730 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-11-17 01:55:11,730 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-17 01:55:11,730 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-17 01:55:11,730 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-17 01:55:11,730 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-11-17 01:55:11,731 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-11-17 01:55:11,731 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-17 01:55:11,731 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_4 [2021-11-17 01:55:11,731 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_4 [2021-11-17 01:55:11,732 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-11-17 01:55:11,732 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-11-17 01:55:11,732 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-11-17 01:55:11,732 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-11-17 01:55:11,732 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-17 01:55:11,732 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 01:55:11,732 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 01:55:11,732 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 01:55:11,733 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 01:55:11,733 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 01:55:11,733 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 01:55:11,733 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-11-17 01:55:11,733 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-11-17 01:55:11,733 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 01:55:11,733 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 01:55:11,734 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 01:55:11,734 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 01:55:11,736 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-11-17 01:55:11,736 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-11-17 01:55:11,736 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-17 01:55:11,736 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-11-17 01:55:11,737 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-11-17 01:55:11,738 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-11-17 01:55:11,738 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-11-17 01:55:11,738 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-11-17 01:55:11,738 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-11-17 01:55:11,742 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 01:55:11,743 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 01:55:11,743 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_32 [2021-11-17 01:55:11,743 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_32 [2021-11-17 01:55:11,743 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-11-17 01:55:11,743 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-11-17 01:55:11,743 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 01:55:11,743 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-11-17 01:55:11,743 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-11-17 01:55:11,743 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_4 [2021-11-17 01:55:11,744 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_4 [2021-11-17 01:55:11,744 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-11-17 01:55:11,744 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-11-17 01:55:11,744 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-11-17 01:55:11,744 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-11-17 01:55:11,744 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-11-17 01:55:11,744 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-11-17 01:55:11,744 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 01:55:11,744 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-11-17 01:55:11,745 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-11-17 01:55:11,745 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_9 [2021-11-17 01:55:11,745 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_9 [2021-11-17 01:55:11,745 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-17 01:55:11,745 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-17 01:55:11,745 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 01:55:11,745 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-11-17 01:55:11,745 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-11-17 01:55:11,745 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 01:55:11,745 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 01:55:11,746 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_4 [2021-11-17 01:55:11,746 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_4 [2021-11-17 01:55:11,746 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-11-17 01:55:11,746 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-11-17 01:55:11,746 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-11-17 01:55:11,746 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-11-17 01:55:11,746 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-11-17 01:55:11,746 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-11-17 01:55:11,746 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-11-17 01:55:11,747 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-11-17 01:55:11,747 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-17 01:55:11,747 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-17 01:55:11,747 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-11-17 01:55:11,747 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-11-17 01:55:11,747 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-11-17 01:55:11,747 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-11-17 01:55:11,747 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-11-17 01:55:11,747 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-11-17 01:55:11,748 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-11-17 01:55:11,748 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-11-17 01:55:11,748 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-11-17 01:55:11,748 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-11-17 01:55:11,748 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-11-17 01:55:11,748 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-11-17 01:55:11,748 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-11-17 01:55:11,748 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-11-17 01:55:11,748 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-11-17 01:55:11,749 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-11-17 01:55:11,749 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-11-17 01:55:11,749 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-11-17 01:55:11,749 INFO L130 BoogieDeclarations]: Found specification of procedure delayed_work_timer_fn [2021-11-17 01:55:11,749 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_47 [2021-11-17 01:55:11,749 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_47 [2021-11-17 01:55:11,749 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-17 01:55:11,749 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-17 01:55:11,750 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-17 01:55:11,750 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-11-17 01:55:11,750 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-11-17 01:55:11,750 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-11-17 01:55:11,750 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-11-17 01:55:11,750 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-17 01:55:11,750 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-17 01:55:11,751 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-11-17 01:55:11,751 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-11-17 01:55:11,751 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-11-17 01:55:11,751 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-11-17 01:55:11,751 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-11-17 01:55:11,751 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 01:55:11,751 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 01:55:12,319 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 01:55:12,324 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 01:55:13,163 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 01:55:15,749 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 01:55:15,763 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 01:55:15,764 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-17 01:55:15,766 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:55:15 BoogieIcfgContainer [2021-11-17 01:55:15,766 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 01:55:15,767 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 01:55:15,767 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 01:55:15,769 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 01:55:15,769 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 01:55:09" (1/3) ... [2021-11-17 01:55:15,770 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@528f32d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:55:15, skipping insertion in model container [2021-11-17 01:55:15,770 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 01:55:11" (2/3) ... [2021-11-17 01:55:15,770 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@528f32d0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 01:55:15, skipping insertion in model container [2021-11-17 01:55:15,770 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:55:15" (3/3) ... [2021-11-17 01:55:15,771 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 01:55:15,774 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 01:55:15,774 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 01:55:15,816 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 01:55:15,821 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 01:55:15,822 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 01:55:15,858 INFO L276 IsEmpty]: Start isEmpty. Operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) [2021-11-17 01:55:15,868 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-11-17 01:55:15,868 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:55:15,869 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:55:15,870 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:55:15,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:55:15,873 INFO L85 PathProgramCache]: Analyzing trace with hash -838760980, now seen corresponding path program 1 times [2021-11-17 01:55:15,880 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:55:15,881 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2125259972] [2021-11-17 01:55:15,881 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:55:15,882 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:55:16,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:55:16,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:16,209 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:16,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:55:16,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:16,247 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:16,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:55:16,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,284 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:16,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:16,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:55:16,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,319 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:16,320 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,327 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:16,328 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:55:16,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,353 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:16,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:55:16,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:16,381 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:16,387 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 01:55:16,388 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:55:16,388 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2125259972] [2021-11-17 01:55:16,389 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2125259972] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:55:16,390 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:55:16,390 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 01:55:16,391 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1479290487] [2021-11-17 01:55:16,392 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:55:16,394 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 01:55:16,395 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:55:16,416 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 01:55:16,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-17 01:55:16,421 INFO L87 Difference]: Start difference. First operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) Second operand has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:21,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:55:21,063 INFO L93 Difference]: Finished difference Result 3320 states and 4941 transitions. [2021-11-17 01:55:21,065 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 01:55:21,066 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 113 [2021-11-17 01:55:21,066 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:55:21,131 INFO L225 Difference]: With dead ends: 3320 [2021-11-17 01:55:21,131 INFO L226 Difference]: Without dead ends: 1727 [2021-11-17 01:55:21,145 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-11-17 01:55:21,148 INFO L933 BasicCegarLoop]: 2119 mSDtfsCounter, 1695 mSDsluCounter, 824 mSDsCounter, 0 mSdLazyCounter, 967 mSolverCounterSat, 1504 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1725 SdHoareTripleChecker+Valid, 2943 SdHoareTripleChecker+Invalid, 2471 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1504 IncrementalHoareTripleChecker+Valid, 967 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.4s IncrementalHoareTripleChecker+Time [2021-11-17 01:55:21,149 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1725 Valid, 2943 Invalid, 2471 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1504 Valid, 967 Invalid, 0 Unknown, 0 Unchecked, 4.4s Time] [2021-11-17 01:55:21,164 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1727 states. [2021-11-17 01:55:21,280 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1727 to 1565. [2021-11-17 01:55:21,284 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1565 states, 1099 states have (on average 1.3876251137397635) internal successors, (1525), 1154 states have internal predecessors, (1525), 373 states have call successors, (373), 93 states have call predecessors, (373), 92 states have return successors, (369), 343 states have call predecessors, (369), 369 states have call successors, (369) [2021-11-17 01:55:21,292 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1565 states to 1565 states and 2267 transitions. [2021-11-17 01:55:21,308 INFO L78 Accepts]: Start accepts. Automaton has 1565 states and 2267 transitions. Word has length 113 [2021-11-17 01:55:21,309 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:55:21,309 INFO L470 AbstractCegarLoop]: Abstraction has 1565 states and 2267 transitions. [2021-11-17 01:55:21,310 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.4) internal successors, (47), 2 states have internal predecessors, (47), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:21,310 INFO L276 IsEmpty]: Start isEmpty. Operand 1565 states and 2267 transitions. [2021-11-17 01:55:21,314 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-11-17 01:55:21,314 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:55:21,314 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:55:21,315 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-17 01:55:21,315 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:55:21,315 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:55:21,315 INFO L85 PathProgramCache]: Analyzing trace with hash -1879567644, now seen corresponding path program 1 times [2021-11-17 01:55:21,316 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:55:21,316 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [213710326] [2021-11-17 01:55:21,316 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:55:21,316 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:55:21,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:55:21,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:21,499 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:21,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:55:21,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:21,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:21,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,534 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:55:21,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:21,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:21,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:55:21,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:21,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:21,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:55:21,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:21,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:55:21,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:21,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:21,643 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 01:55:21,643 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:55:21,644 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [213710326] [2021-11-17 01:55:21,644 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [213710326] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:55:21,644 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:55:21,644 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 01:55:21,644 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [897793158] [2021-11-17 01:55:21,644 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:55:21,645 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 01:55:21,646 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:55:21,646 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 01:55:21,646 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 01:55:21,646 INFO L87 Difference]: Start difference. First operand 1565 states and 2267 transitions. Second operand has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:34,282 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:55:34,282 INFO L93 Difference]: Finished difference Result 4963 states and 7452 transitions. [2021-11-17 01:55:34,282 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 01:55:34,282 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 113 [2021-11-17 01:55:34,283 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:55:34,300 INFO L225 Difference]: With dead ends: 4963 [2021-11-17 01:55:34,300 INFO L226 Difference]: Without dead ends: 3421 [2021-11-17 01:55:34,308 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-17 01:55:34,312 INFO L933 BasicCegarLoop]: 2626 mSDtfsCounter, 4037 mSDsluCounter, 4458 mSDsCounter, 0 mSdLazyCounter, 4098 mSolverCounterSat, 2180 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4249 SdHoareTripleChecker+Valid, 7084 SdHoareTripleChecker+Invalid, 6278 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2180 IncrementalHoareTripleChecker+Valid, 4098 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.3s IncrementalHoareTripleChecker+Time [2021-11-17 01:55:34,313 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4249 Valid, 7084 Invalid, 6278 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2180 Valid, 4098 Invalid, 0 Unknown, 0 Unchecked, 12.3s Time] [2021-11-17 01:55:34,319 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3421 states. [2021-11-17 01:55:34,420 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3421 to 3128. [2021-11-17 01:55:34,426 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3128 states, 2197 states have (on average 1.385980883022303) internal successors, (3045), 2307 states have internal predecessors, (3045), 738 states have call successors, (738), 184 states have call predecessors, (738), 192 states have return successors, (786), 690 states have call predecessors, (786), 734 states have call successors, (786) [2021-11-17 01:55:34,440 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3128 states to 3128 states and 4569 transitions. [2021-11-17 01:55:34,442 INFO L78 Accepts]: Start accepts. Automaton has 3128 states and 4569 transitions. Word has length 113 [2021-11-17 01:55:34,444 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:55:34,444 INFO L470 AbstractCegarLoop]: Abstraction has 3128 states and 4569 transitions. [2021-11-17 01:55:34,444 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 7.833333333333333) internal successors, (47), 3 states have internal predecessors, (47), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:34,444 INFO L276 IsEmpty]: Start isEmpty. Operand 3128 states and 4569 transitions. [2021-11-17 01:55:34,450 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-17 01:55:34,450 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:55:34,450 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:55:34,451 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-17 01:55:34,451 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:55:34,451 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:55:34,451 INFO L85 PathProgramCache]: Analyzing trace with hash 1862399358, now seen corresponding path program 1 times [2021-11-17 01:55:34,451 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:55:34,452 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1547633868] [2021-11-17 01:55:34,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:55:34,452 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:55:34,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:55:34,579 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:34,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:34,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:55:34,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:34,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:34,621 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:55:34,628 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:34,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:34,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:55:34,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:34,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:34,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:55:34,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:34,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:55:34,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:34,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:34,718 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 01:55:34,719 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:55:34,719 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1547633868] [2021-11-17 01:55:34,719 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1547633868] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:55:34,719 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:55:34,719 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 01:55:34,720 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2073632700] [2021-11-17 01:55:34,720 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:55:34,720 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 01:55:34,720 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:55:34,721 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 01:55:34,721 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 01:55:34,721 INFO L87 Difference]: Start difference. First operand 3128 states and 4569 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:45,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:55:45,951 INFO L93 Difference]: Finished difference Result 9554 states and 14417 transitions. [2021-11-17 01:55:45,952 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 01:55:45,952 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-11-17 01:55:45,952 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:55:45,987 INFO L225 Difference]: With dead ends: 9554 [2021-11-17 01:55:45,987 INFO L226 Difference]: Without dead ends: 6449 [2021-11-17 01:55:46,005 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-17 01:55:46,006 INFO L933 BasicCegarLoop]: 2343 mSDtfsCounter, 3826 mSDsluCounter, 4101 mSDsCounter, 0 mSdLazyCounter, 3747 mSolverCounterSat, 2177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4003 SdHoareTripleChecker+Valid, 6444 SdHoareTripleChecker+Invalid, 5924 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2177 IncrementalHoareTripleChecker+Valid, 3747 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2021-11-17 01:55:46,006 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4003 Valid, 6444 Invalid, 5924 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2177 Valid, 3747 Invalid, 0 Unknown, 0 Unchecked, 10.9s Time] [2021-11-17 01:55:46,012 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6449 states. [2021-11-17 01:55:46,177 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6449 to 5863. [2021-11-17 01:55:46,187 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5863 states, 4118 states have (on average 1.3919378338999515) internal successors, (5732), 4333 states have internal predecessors, (5732), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 367 states have return successors, (1475), 1285 states have call predecessors, (1475), 1373 states have call successors, (1475) [2021-11-17 01:55:46,208 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5863 states to 5863 states and 8584 transitions. [2021-11-17 01:55:46,209 INFO L78 Accepts]: Start accepts. Automaton has 5863 states and 8584 transitions. Word has length 114 [2021-11-17 01:55:46,210 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:55:46,210 INFO L470 AbstractCegarLoop]: Abstraction has 5863 states and 8584 transitions. [2021-11-17 01:55:46,210 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:46,210 INFO L276 IsEmpty]: Start isEmpty. Operand 5863 states and 8584 transitions. [2021-11-17 01:55:46,214 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-11-17 01:55:46,214 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:55:46,215 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:55:46,215 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-17 01:55:46,215 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:55:46,216 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:55:46,216 INFO L85 PathProgramCache]: Analyzing trace with hash 1899264295, now seen corresponding path program 1 times [2021-11-17 01:55:46,216 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:55:46,216 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1728604480] [2021-11-17 01:55:46,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:55:46,216 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:55:46,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:55:46,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:46,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:46,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:55:46,378 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:46,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:46,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:55:46,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:46,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:46,408 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:55:46,416 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,421 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:46,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:46,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,437 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:55:46,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,446 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:46,447 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:55:46,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,460 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:46,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:46,464 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 01:55:46,465 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:55:46,465 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1728604480] [2021-11-17 01:55:46,465 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1728604480] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:55:46,465 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:55:46,465 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 01:55:46,466 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1236842276] [2021-11-17 01:55:46,466 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:55:46,466 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 01:55:46,466 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:55:46,467 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 01:55:46,467 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 01:55:46,467 INFO L87 Difference]: Start difference. First operand 5863 states and 8584 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:50,798 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:55:50,798 INFO L93 Difference]: Finished difference Result 6444 states and 9628 transitions. [2021-11-17 01:55:50,798 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 01:55:50,798 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 115 [2021-11-17 01:55:50,799 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:55:50,827 INFO L225 Difference]: With dead ends: 6444 [2021-11-17 01:55:50,828 INFO L226 Difference]: Without dead ends: 6441 [2021-11-17 01:55:50,831 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:55:50,832 INFO L933 BasicCegarLoop]: 2040 mSDtfsCounter, 3609 mSDsluCounter, 812 mSDsCounter, 0 mSdLazyCounter, 985 mSolverCounterSat, 1838 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3825 SdHoareTripleChecker+Valid, 2852 SdHoareTripleChecker+Invalid, 2823 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1838 IncrementalHoareTripleChecker+Valid, 985 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:55:50,832 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3825 Valid, 2852 Invalid, 2823 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1838 Valid, 985 Invalid, 0 Unknown, 0 Unchecked, 4.1s Time] [2021-11-17 01:55:50,838 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6441 states. [2021-11-17 01:55:50,994 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6441 to 5862. [2021-11-17 01:55:51,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5862 states, 4118 states have (on average 1.3916949975716366) internal successors, (5731), 4332 states have internal predecessors, (5731), 1376 states have call successors, (1376), 350 states have call predecessors, (1376), 367 states have return successors, (1475), 1285 states have call predecessors, (1475), 1373 states have call successors, (1475) [2021-11-17 01:55:51,024 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5862 states to 5862 states and 8582 transitions. [2021-11-17 01:55:51,025 INFO L78 Accepts]: Start accepts. Automaton has 5862 states and 8582 transitions. Word has length 115 [2021-11-17 01:55:51,025 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:55:51,026 INFO L470 AbstractCegarLoop]: Abstraction has 5862 states and 8582 transitions. [2021-11-17 01:55:51,026 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:51,026 INFO L276 IsEmpty]: Start isEmpty. Operand 5862 states and 8582 transitions. [2021-11-17 01:55:51,028 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-17 01:55:51,028 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:55:51,028 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:55:51,028 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-17 01:55:51,028 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:55:51,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:55:51,029 INFO L85 PathProgramCache]: Analyzing trace with hash -1252885087, now seen corresponding path program 1 times [2021-11-17 01:55:51,029 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:55:51,029 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1734861920] [2021-11-17 01:55:51,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:55:51,030 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:55:51,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,115 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:55:51,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:51,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:51,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:55:51,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:51,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:51,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,164 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:55:51,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:51,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:51,185 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:55:51,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:51,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,202 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:51,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,214 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:55:51,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:51,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:55:51,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:51,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:51,247 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 01:55:51,247 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:55:51,248 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1734861920] [2021-11-17 01:55:51,248 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1734861920] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:55:51,248 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:55:51,248 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 01:55:51,248 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1922658343] [2021-11-17 01:55:51,248 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:55:51,249 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 01:55:51,249 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:55:51,249 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 01:55:51,250 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 01:55:51,250 INFO L87 Difference]: Start difference. First operand 5862 states and 8582 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:58,096 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:55:58,096 INFO L93 Difference]: Finished difference Result 6443 states and 9626 transitions. [2021-11-17 01:55:58,096 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 01:55:58,096 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 116 [2021-11-17 01:55:58,097 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:55:58,136 INFO L225 Difference]: With dead ends: 6443 [2021-11-17 01:55:58,137 INFO L226 Difference]: Without dead ends: 6411 [2021-11-17 01:55:58,144 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:55:58,145 INFO L933 BasicCegarLoop]: 2047 mSDtfsCounter, 3089 mSDsluCounter, 1486 mSDsCounter, 0 mSdLazyCounter, 1679 mSolverCounterSat, 1359 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3302 SdHoareTripleChecker+Valid, 3533 SdHoareTripleChecker+Invalid, 3038 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1359 IncrementalHoareTripleChecker+Valid, 1679 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.6s IncrementalHoareTripleChecker+Time [2021-11-17 01:55:58,146 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3302 Valid, 3533 Invalid, 3038 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1359 Valid, 1679 Invalid, 0 Unknown, 0 Unchecked, 6.6s Time] [2021-11-17 01:55:58,152 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6411 states. [2021-11-17 01:55:58,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6411 to 5832. [2021-11-17 01:55:58,351 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5832 states, 4102 states have (on average 1.3922476840565579) internal successors, (5711), 4315 states have internal predecessors, (5711), 1363 states have call successors, (1363), 349 states have call predecessors, (1363), 366 states have return successors, (1463), 1273 states have call predecessors, (1463), 1361 states have call successors, (1463) [2021-11-17 01:55:58,371 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5832 states to 5832 states and 8537 transitions. [2021-11-17 01:55:58,371 INFO L78 Accepts]: Start accepts. Automaton has 5832 states and 8537 transitions. Word has length 116 [2021-11-17 01:55:58,372 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:55:58,373 INFO L470 AbstractCegarLoop]: Abstraction has 5832 states and 8537 transitions. [2021-11-17 01:55:58,373 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 01:55:58,374 INFO L276 IsEmpty]: Start isEmpty. Operand 5832 states and 8537 transitions. [2021-11-17 01:55:58,380 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 167 [2021-11-17 01:55:58,380 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:55:58,380 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:55:58,380 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-17 01:55:58,381 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:55:58,381 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:55:58,381 INFO L85 PathProgramCache]: Analyzing trace with hash -779411748, now seen corresponding path program 1 times [2021-11-17 01:55:58,382 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:55:58,385 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1405923176] [2021-11-17 01:55:58,385 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:55:58,385 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:55:58,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:55:58,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:58,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:58,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:55:58,491 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:58,496 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:58,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:55:58,508 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:58,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:58,519 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:55:58,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,532 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:58,533 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,536 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:55:58,537 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:55:58,549 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,556 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:58,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:55:58,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,567 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:58,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,578 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 97 [2021-11-17 01:55:58,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 01:55:58,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-11-17 01:55:58,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 118 [2021-11-17 01:55:58,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 123 [2021-11-17 01:55:58,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:55:58,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-11-17 01:55:58,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:55:58,626 INFO L134 CoverageAnalysis]: Checked inductivity of 108 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-11-17 01:55:58,627 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:55:58,627 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1405923176] [2021-11-17 01:55:58,627 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1405923176] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:55:58,627 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:55:58,627 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 01:55:58,627 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [460397474] [2021-11-17 01:55:58,627 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:55:58,628 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 01:55:58,628 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:55:58,628 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 01:55:58,628 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:55:58,629 INFO L87 Difference]: Start difference. First operand 5832 states and 8537 transitions. Second operand has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-17 01:56:11,264 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:56:11,265 INFO L93 Difference]: Finished difference Result 20022 states and 30342 transitions. [2021-11-17 01:56:11,265 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 01:56:11,265 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 166 [2021-11-17 01:56:11,266 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:56:11,329 INFO L225 Difference]: With dead ends: 20022 [2021-11-17 01:56:11,329 INFO L226 Difference]: Without dead ends: 14213 [2021-11-17 01:56:11,354 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-11-17 01:56:11,355 INFO L933 BasicCegarLoop]: 2274 mSDtfsCounter, 7203 mSDsluCounter, 4857 mSDsCounter, 0 mSdLazyCounter, 5796 mSolverCounterSat, 5852 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7525 SdHoareTripleChecker+Valid, 7131 SdHoareTripleChecker+Invalid, 11648 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 5852 IncrementalHoareTripleChecker+Valid, 5796 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.9s IncrementalHoareTripleChecker+Time [2021-11-17 01:56:11,355 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7525 Valid, 7131 Invalid, 11648 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [5852 Valid, 5796 Invalid, 0 Unknown, 0 Unchecked, 11.9s Time] [2021-11-17 01:56:11,367 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14213 states. [2021-11-17 01:56:11,805 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14213 to 12528. [2021-11-17 01:56:11,824 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12528 states, 8714 states have (on average 1.3847831076428736) internal successors, (12067), 9225 states have internal predecessors, (12067), 2933 states have call successors, (2933), 677 states have call predecessors, (2933), 880 states have return successors, (3800), 2907 states have call predecessors, (3800), 2931 states have call successors, (3800) [2021-11-17 01:56:11,876 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12528 states to 12528 states and 18800 transitions. [2021-11-17 01:56:11,879 INFO L78 Accepts]: Start accepts. Automaton has 12528 states and 18800 transitions. Word has length 166 [2021-11-17 01:56:11,879 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:56:11,879 INFO L470 AbstractCegarLoop]: Abstraction has 12528 states and 18800 transitions. [2021-11-17 01:56:11,879 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 9.875) internal successors, (79), 3 states have internal predecessors, (79), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-17 01:56:11,880 INFO L276 IsEmpty]: Start isEmpty. Operand 12528 states and 18800 transitions. [2021-11-17 01:56:11,894 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 205 [2021-11-17 01:56:11,894 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:56:11,894 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:56:11,894 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-17 01:56:11,895 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:56:11,895 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:56:11,895 INFO L85 PathProgramCache]: Analyzing trace with hash 2017075681, now seen corresponding path program 1 times [2021-11-17 01:56:11,895 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:56:11,895 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1377686210] [2021-11-17 01:56:11,895 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:56:11,896 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:56:11,948 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:56:12,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,035 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:12,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:56:12,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,045 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,048 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:12,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:56:12,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:12,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:56:12,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:12,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,091 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:56:12,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:56:12,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 01:56:12,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:12,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-11-17 01:56:12,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-11-17 01:56:12,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,160 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 151 [2021-11-17 01:56:12,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-11-17 01:56:12,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-11-17 01:56:12,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:12,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 172 [2021-11-17 01:56:12,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:12,202 INFO L134 CoverageAnalysis]: Checked inductivity of 182 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 165 trivial. 0 not checked. [2021-11-17 01:56:12,202 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:56:12,202 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1377686210] [2021-11-17 01:56:12,202 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1377686210] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:56:12,203 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:56:12,203 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-17 01:56:12,203 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1837034050] [2021-11-17 01:56:12,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:56:12,204 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-17 01:56:12,204 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:56:12,204 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-17 01:56:12,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-17 01:56:12,205 INFO L87 Difference]: Start difference. First operand 12528 states and 18800 transitions. Second operand has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-17 01:56:23,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:56:23,260 INFO L93 Difference]: Finished difference Result 29013 states and 44652 transitions. [2021-11-17 01:56:23,260 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 01:56:23,260 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 204 [2021-11-17 01:56:23,261 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:56:23,376 INFO L225 Difference]: With dead ends: 29013 [2021-11-17 01:56:23,377 INFO L226 Difference]: Without dead ends: 16508 [2021-11-17 01:56:23,414 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=225, Unknown=0, NotChecked=0, Total=306 [2021-11-17 01:56:23,415 INFO L933 BasicCegarLoop]: 2339 mSDtfsCounter, 5251 mSDsluCounter, 5549 mSDsCounter, 0 mSdLazyCounter, 4878 mSolverCounterSat, 3807 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5516 SdHoareTripleChecker+Valid, 7888 SdHoareTripleChecker+Invalid, 8685 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3807 IncrementalHoareTripleChecker+Valid, 4878 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.4s IncrementalHoareTripleChecker+Time [2021-11-17 01:56:23,415 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5516 Valid, 7888 Invalid, 8685 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3807 Valid, 4878 Invalid, 0 Unknown, 0 Unchecked, 10.4s Time] [2021-11-17 01:56:23,428 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16508 states. [2021-11-17 01:56:23,877 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16508 to 12542. [2021-11-17 01:56:23,894 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12542 states, 8728 states have (on average 1.38416590284143) internal successors, (12081), 9239 states have internal predecessors, (12081), 2933 states have call successors, (2933), 677 states have call predecessors, (2933), 880 states have return successors, (3800), 2907 states have call predecessors, (3800), 2931 states have call successors, (3800) [2021-11-17 01:56:24,007 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12542 states to 12542 states and 18814 transitions. [2021-11-17 01:56:24,011 INFO L78 Accepts]: Start accepts. Automaton has 12542 states and 18814 transitions. Word has length 204 [2021-11-17 01:56:24,012 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:56:24,012 INFO L470 AbstractCegarLoop]: Abstraction has 12542 states and 18814 transitions. [2021-11-17 01:56:24,013 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.222222222222221) internal successors, (101), 4 states have internal predecessors, (101), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-17 01:56:24,013 INFO L276 IsEmpty]: Start isEmpty. Operand 12542 states and 18814 transitions. [2021-11-17 01:56:24,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 222 [2021-11-17 01:56:24,027 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:56:24,027 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:56:24,028 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-17 01:56:24,028 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:56:24,028 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:56:24,028 INFO L85 PathProgramCache]: Analyzing trace with hash 669285560, now seen corresponding path program 1 times [2021-11-17 01:56:24,028 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:56:24,029 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1361088084] [2021-11-17 01:56:24,029 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:56:24,029 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:56:24,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:56:24,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:24,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:56:24,163 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:24,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:56:24,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,183 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:24,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:56:24,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,199 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:24,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:56:24,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,225 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:56:24,227 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,231 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 01:56:24,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:24,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,250 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-11-17 01:56:24,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:24,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-11-17 01:56:24,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-11-17 01:56:24,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-11-17 01:56:24,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,299 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-17 01:56:24,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 01:56:24,309 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,314 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:24,315 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-11-17 01:56:24,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:24,332 INFO L134 CoverageAnalysis]: Checked inductivity of 252 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 234 trivial. 0 not checked. [2021-11-17 01:56:24,332 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:56:24,332 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1361088084] [2021-11-17 01:56:24,332 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1361088084] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:56:24,332 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:56:24,333 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 01:56:24,333 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [955902918] [2021-11-17 01:56:24,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:56:24,333 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 01:56:24,333 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:56:24,334 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 01:56:24,334 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 01:56:24,334 INFO L87 Difference]: Start difference. First operand 12542 states and 18814 transitions. Second operand has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 01:56:42,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:56:42,514 INFO L93 Difference]: Finished difference Result 40379 states and 61522 transitions. [2021-11-17 01:56:42,515 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 01:56:42,515 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 221 [2021-11-17 01:56:42,515 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:56:42,648 INFO L225 Difference]: With dead ends: 40379 [2021-11-17 01:56:42,648 INFO L226 Difference]: Without dead ends: 27860 [2021-11-17 01:56:42,700 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-11-17 01:56:42,701 INFO L933 BasicCegarLoop]: 3455 mSDtfsCounter, 4866 mSDsluCounter, 7114 mSDsCounter, 0 mSdLazyCounter, 8551 mSolverCounterSat, 4351 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5225 SdHoareTripleChecker+Valid, 10569 SdHoareTripleChecker+Invalid, 12902 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 4351 IncrementalHoareTripleChecker+Valid, 8551 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.2s IncrementalHoareTripleChecker+Time [2021-11-17 01:56:42,701 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5225 Valid, 10569 Invalid, 12902 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [4351 Valid, 8551 Invalid, 0 Unknown, 0 Unchecked, 17.2s Time] [2021-11-17 01:56:42,728 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27860 states. [2021-11-17 01:56:43,621 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27860 to 24607. [2021-11-17 01:56:43,655 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24607 states, 17148 states have (on average 1.3852927455096804) internal successors, (23755), 18149 states have internal predecessors, (23755), 5723 states have call successors, (5723), 1328 states have call predecessors, (5723), 1735 states have return successors, (7451), 5673 states have call predecessors, (7451), 5721 states have call successors, (7451) [2021-11-17 01:56:43,764 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24607 states to 24607 states and 36929 transitions. [2021-11-17 01:56:43,770 INFO L78 Accepts]: Start accepts. Automaton has 24607 states and 36929 transitions. Word has length 221 [2021-11-17 01:56:43,770 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:56:43,770 INFO L470 AbstractCegarLoop]: Abstraction has 24607 states and 36929 transitions. [2021-11-17 01:56:43,771 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 12.875) internal successors, (103), 3 states have internal predecessors, (103), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 01:56:43,771 INFO L276 IsEmpty]: Start isEmpty. Operand 24607 states and 36929 transitions. [2021-11-17 01:56:43,810 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 248 [2021-11-17 01:56:43,811 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:56:43,811 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:56:43,811 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-17 01:56:43,811 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:56:43,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:56:43,812 INFO L85 PathProgramCache]: Analyzing trace with hash 1675118902, now seen corresponding path program 1 times [2021-11-17 01:56:43,812 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:56:43,812 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1262515544] [2021-11-17 01:56:43,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:56:43,813 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:56:43,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:43,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:56:43,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:43,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:43,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,028 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:44,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:56:44,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:44,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,042 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:44,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:56:44,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:44,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:44,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:56:44,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:44,068 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:44,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,080 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:56:44,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:44,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:56:44,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:44,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 01:56:44,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:44,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:44,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 128 [2021-11-17 01:56:44,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-11-17 01:56:44,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 142 [2021-11-17 01:56:44,135 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,138 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 146 [2021-11-17 01:56:44,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-11-17 01:56:44,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 160 [2021-11-17 01:56:44,147 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 01:56:44,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-11-17 01:56:44,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2021-11-17 01:56:44,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-11-17 01:56:44,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-11-17 01:56:44,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:44,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2021-11-17 01:56:44,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:44,193 INFO L134 CoverageAnalysis]: Checked inductivity of 213 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 194 trivial. 0 not checked. [2021-11-17 01:56:44,193 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:56:44,193 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1262515544] [2021-11-17 01:56:44,193 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1262515544] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:56:44,193 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:56:44,194 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-17 01:56:44,194 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [410492276] [2021-11-17 01:56:44,194 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:56:44,195 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-17 01:56:44,195 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:56:44,195 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-17 01:56:44,195 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-17 01:56:44,196 INFO L87 Difference]: Start difference. First operand 24607 states and 36929 transitions. Second operand has 9 states, 9 states have (on average 12.88888888888889) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-17 01:56:56,988 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:56:56,988 INFO L93 Difference]: Finished difference Result 42152 states and 63753 transitions. [2021-11-17 01:56:56,988 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 01:56:56,989 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 12.88888888888889) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 247 [2021-11-17 01:56:56,991 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:56:57,062 INFO L225 Difference]: With dead ends: 42152 [2021-11-17 01:56:57,062 INFO L226 Difference]: Without dead ends: 17576 [2021-11-17 01:56:57,124 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 75 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 18 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=64, Invalid=118, Unknown=0, NotChecked=0, Total=182 [2021-11-17 01:56:57,127 INFO L933 BasicCegarLoop]: 1994 mSDtfsCounter, 2393 mSDsluCounter, 4128 mSDsCounter, 0 mSdLazyCounter, 4842 mSolverCounterSat, 2182 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2535 SdHoareTripleChecker+Valid, 6122 SdHoareTripleChecker+Invalid, 7024 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2182 IncrementalHoareTripleChecker+Valid, 4842 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.8s IncrementalHoareTripleChecker+Time [2021-11-17 01:56:57,127 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2535 Valid, 6122 Invalid, 7024 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2182 Valid, 4842 Invalid, 0 Unknown, 0 Unchecked, 11.8s Time] [2021-11-17 01:56:57,142 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17576 states. [2021-11-17 01:56:57,846 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17576 to 15464. [2021-11-17 01:56:57,863 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15464 states, 10750 states have (on average 1.3809302325581396) internal successors, (14845), 11382 states have internal predecessors, (14845), 3599 states have call successors, (3599), 860 states have call predecessors, (3599), 1114 states have return successors, (4672), 3565 states have call predecessors, (4672), 3597 states have call successors, (4672) [2021-11-17 01:56:57,920 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15464 states to 15464 states and 23116 transitions. [2021-11-17 01:56:57,926 INFO L78 Accepts]: Start accepts. Automaton has 15464 states and 23116 transitions. Word has length 247 [2021-11-17 01:56:57,926 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:56:57,927 INFO L470 AbstractCegarLoop]: Abstraction has 15464 states and 23116 transitions. [2021-11-17 01:56:57,927 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 12.88888888888889) internal successors, (116), 3 states have internal predecessors, (116), 2 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-17 01:56:57,927 INFO L276 IsEmpty]: Start isEmpty. Operand 15464 states and 23116 transitions. [2021-11-17 01:56:57,976 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 281 [2021-11-17 01:56:57,976 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:56:57,976 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:56:57,977 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-17 01:56:57,977 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:56:57,977 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:56:57,977 INFO L85 PathProgramCache]: Analyzing trace with hash -661611690, now seen corresponding path program 1 times [2021-11-17 01:56:57,977 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:56:57,977 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1711461474] [2021-11-17 01:56:57,978 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:56:57,978 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:56:58,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:56:58,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,096 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:58,100 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:56:58,104 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:58,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:56:58,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:58,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:56:58,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:58,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,140 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:56:58,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:56:58,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,151 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,290 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-11-17 01:56:58,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:56:58,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:58,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,338 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:56:58,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 01:56:58,343 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:56:58,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 01:56:58,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,384 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 01:56:58,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,388 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:56:58,389 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:56:58,394 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,419 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:56:58,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 01:56:58,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,426 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 01:56:58,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 01:56:58,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 01:56:58,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,452 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 01:56:58,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,463 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,464 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:56:58,469 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:56:58,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,476 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:56:58,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,479 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 01:56:58,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 01:56:58,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:56:58,487 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 01:56:58,487 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:56:58,487 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1711461474] [2021-11-17 01:56:58,487 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1711461474] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:56:58,487 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:56:58,488 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 01:56:58,488 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1078038570] [2021-11-17 01:56:58,488 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:56:58,488 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 01:56:58,488 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:56:58,489 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 01:56:58,489 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 01:56:58,489 INFO L87 Difference]: Start difference. First operand 15464 states and 23116 transitions. Second operand has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:08,168 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:57:08,168 INFO L93 Difference]: Finished difference Result 33015 states and 49933 transitions. [2021-11-17 01:57:08,168 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 01:57:08,168 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 280 [2021-11-17 01:57:08,169 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:57:08,287 INFO L225 Difference]: With dead ends: 33015 [2021-11-17 01:57:08,287 INFO L226 Difference]: Without dead ends: 17584 [2021-11-17 01:57:08,328 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 01:57:08,329 INFO L933 BasicCegarLoop]: 1872 mSDtfsCounter, 6522 mSDsluCounter, 3425 mSDsCounter, 0 mSdLazyCounter, 5285 mSolverCounterSat, 5265 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 7.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6801 SdHoareTripleChecker+Valid, 5297 SdHoareTripleChecker+Invalid, 10550 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5265 IncrementalHoareTripleChecker+Valid, 5285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 8.7s IncrementalHoareTripleChecker+Time [2021-11-17 01:57:08,329 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6801 Valid, 5297 Invalid, 10550 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5265 Valid, 5285 Invalid, 0 Unknown, 0 Unchecked, 8.7s Time] [2021-11-17 01:57:08,340 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17584 states. [2021-11-17 01:57:09,018 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17584 to 15444. [2021-11-17 01:57:09,036 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15444 states, 10740 states have (on average 1.3803538175046555) internal successors, (14825), 11372 states have internal predecessors, (14825), 3589 states have call successors, (3589), 860 states have call predecessors, (3589), 1114 states have return successors, (4642), 3555 states have call predecessors, (4642), 3587 states have call successors, (4642) [2021-11-17 01:57:09,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15444 states to 15444 states and 23056 transitions. [2021-11-17 01:57:09,102 INFO L78 Accepts]: Start accepts. Automaton has 15444 states and 23056 transitions. Word has length 280 [2021-11-17 01:57:09,102 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:57:09,103 INFO L470 AbstractCegarLoop]: Abstraction has 15444 states and 23056 transitions. [2021-11-17 01:57:09,103 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.0) internal successors, (156), 5 states have internal predecessors, (156), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:09,103 INFO L276 IsEmpty]: Start isEmpty. Operand 15444 states and 23056 transitions. [2021-11-17 01:57:09,139 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 284 [2021-11-17 01:57:09,139 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:57:09,140 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:57:09,140 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-17 01:57:09,140 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:57:09,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:57:09,141 INFO L85 PathProgramCache]: Analyzing trace with hash -472580315, now seen corresponding path program 1 times [2021-11-17 01:57:09,142 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:57:09,142 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [843194066] [2021-11-17 01:57:09,142 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:57:09,142 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:57:09,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,252 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:57:09,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,268 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:09,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:57:09,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:09,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,288 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:57:09,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,294 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:09,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:57:09,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,307 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:09,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:57:09,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:57:09,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,381 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-11-17 01:57:09,398 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:57:09,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,439 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:09,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,444 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:09,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 01:57:09,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:57:09,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,458 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 01:57:09,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,470 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 01:57:09,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:09,480 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,484 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:57:09,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,497 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,511 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:09,512 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,515 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 01:57:09,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 01:57:09,520 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,523 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 01:57:09,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,527 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 01:57:09,528 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,542 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 01:57:09,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:09,558 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,561 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:09,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:57:09,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,568 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 01:57:09,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 01:57:09,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:09,575 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 01:57:09,576 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:57:09,576 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [843194066] [2021-11-17 01:57:09,576 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [843194066] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:57:09,576 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:57:09,576 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 01:57:09,576 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1214840318] [2021-11-17 01:57:09,576 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:57:09,577 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 01:57:09,578 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:57:09,578 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 01:57:09,578 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 01:57:09,579 INFO L87 Difference]: Start difference. First operand 15444 states and 23056 transitions. Second operand has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:23,814 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:57:23,815 INFO L93 Difference]: Finished difference Result 32975 states and 49808 transitions. [2021-11-17 01:57:23,815 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 01:57:23,816 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 283 [2021-11-17 01:57:23,816 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:57:23,889 INFO L225 Difference]: With dead ends: 32975 [2021-11-17 01:57:23,890 INFO L226 Difference]: Without dead ends: 17564 [2021-11-17 01:57:23,932 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 01:57:23,933 INFO L933 BasicCegarLoop]: 1868 mSDtfsCounter, 5762 mSDsluCounter, 4130 mSDsCounter, 0 mSdLazyCounter, 5844 mSolverCounterSat, 4604 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6032 SdHoareTripleChecker+Valid, 5998 SdHoareTripleChecker+Invalid, 10448 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4604 IncrementalHoareTripleChecker+Valid, 5844 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:57:23,933 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6032 Valid, 5998 Invalid, 10448 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4604 Valid, 5844 Invalid, 0 Unknown, 0 Unchecked, 13.1s Time] [2021-11-17 01:57:23,945 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17564 states. [2021-11-17 01:57:24,638 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17564 to 15424. [2021-11-17 01:57:24,653 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15424 states, 10730 states have (on average 1.3797763280521902) internal successors, (14805), 11362 states have internal predecessors, (14805), 3579 states have call successors, (3579), 860 states have call predecessors, (3579), 1114 states have return successors, (4612), 3545 states have call predecessors, (4612), 3577 states have call successors, (4612) [2021-11-17 01:57:24,703 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15424 states to 15424 states and 22996 transitions. [2021-11-17 01:57:24,708 INFO L78 Accepts]: Start accepts. Automaton has 15424 states and 22996 transitions. Word has length 283 [2021-11-17 01:57:24,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:57:24,708 INFO L470 AbstractCegarLoop]: Abstraction has 15424 states and 22996 transitions. [2021-11-17 01:57:24,708 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:24,709 INFO L276 IsEmpty]: Start isEmpty. Operand 15424 states and 22996 transitions. [2021-11-17 01:57:24,736 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 282 [2021-11-17 01:57:24,736 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:57:24,737 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:57:24,737 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-17 01:57:24,737 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:57:24,737 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:57:24,737 INFO L85 PathProgramCache]: Analyzing trace with hash 1923689798, now seen corresponding path program 1 times [2021-11-17 01:57:24,737 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:57:24,738 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1969146858] [2021-11-17 01:57:24,738 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:57:24,738 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:57:24,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:57:24,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:24,847 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:24,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:57:24,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:24,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:24,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:57:24,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:24,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:24,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:57:24,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,891 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:24,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:24,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:57:24,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:24,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:57:24,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:24,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-17 01:57:24,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:24,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:57:24,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,000 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:25,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,005 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:25,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,010 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 01:57:25,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:57:25,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 01:57:25,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,033 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:25,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,037 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 01:57:25,037 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:25,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:57:25,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:25,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:25,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:25,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 01:57:25,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,079 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 01:57:25,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 01:57:25,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 01:57:25,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 01:57:25,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:25,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:25,115 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:25,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:57:25,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 01:57:25,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,128 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 01:57:25,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:25,133 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 01:57:25,133 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:57:25,133 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1969146858] [2021-11-17 01:57:25,133 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1969146858] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:57:25,133 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:57:25,134 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 01:57:25,134 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581817870] [2021-11-17 01:57:25,134 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:57:25,135 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 01:57:25,135 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:57:25,136 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 01:57:25,136 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 01:57:25,137 INFO L87 Difference]: Start difference. First operand 15424 states and 22996 transitions. Second operand has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:41,393 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:57:41,393 INFO L93 Difference]: Finished difference Result 32935 states and 49683 transitions. [2021-11-17 01:57:41,393 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 01:57:41,393 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 281 [2021-11-17 01:57:41,394 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:57:41,467 INFO L225 Difference]: With dead ends: 32935 [2021-11-17 01:57:41,468 INFO L226 Difference]: Without dead ends: 17544 [2021-11-17 01:57:41,509 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 01:57:41,510 INFO L933 BasicCegarLoop]: 1876 mSDtfsCounter, 5159 mSDsluCounter, 4332 mSDsCounter, 0 mSdLazyCounter, 6544 mSolverCounterSat, 3952 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5429 SdHoareTripleChecker+Valid, 6208 SdHoareTripleChecker+Invalid, 10496 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3952 IncrementalHoareTripleChecker+Valid, 6544 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:57:41,510 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5429 Valid, 6208 Invalid, 10496 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3952 Valid, 6544 Invalid, 0 Unknown, 0 Unchecked, 15.1s Time] [2021-11-17 01:57:41,523 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17544 states. [2021-11-17 01:57:42,161 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17544 to 15404. [2021-11-17 01:57:42,175 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15404 states, 10720 states have (on average 1.3791977611940298) internal successors, (14785), 11352 states have internal predecessors, (14785), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1114 states have return successors, (4582), 3535 states have call predecessors, (4582), 3567 states have call successors, (4582) [2021-11-17 01:57:42,227 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15404 states to 15404 states and 22936 transitions. [2021-11-17 01:57:42,232 INFO L78 Accepts]: Start accepts. Automaton has 15404 states and 22936 transitions. Word has length 281 [2021-11-17 01:57:42,232 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:57:42,233 INFO L470 AbstractCegarLoop]: Abstraction has 15404 states and 22936 transitions. [2021-11-17 01:57:42,233 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:42,233 INFO L276 IsEmpty]: Start isEmpty. Operand 15404 states and 22936 transitions. [2021-11-17 01:57:42,260 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 283 [2021-11-17 01:57:42,260 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:57:42,260 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:57:42,260 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-11-17 01:57:42,261 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:57:42,261 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:57:42,261 INFO L85 PathProgramCache]: Analyzing trace with hash -535877291, now seen corresponding path program 1 times [2021-11-17 01:57:42,261 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:57:42,261 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2037760641] [2021-11-17 01:57:42,261 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:57:42,262 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:57:42,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,354 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:57:42,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:42,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:57:42,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,373 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,375 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:42,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:57:42,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:42,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:57:42,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:42,399 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:57:42,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:57:42,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-17 01:57:42,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,592 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:57:42,593 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,605 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:42,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:42,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,614 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 01:57:42,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:57:42,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 01:57:42,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 01:57:42,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:42,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:57:42,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 01:57:42,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 01:57:42,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 01:57:42,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 01:57:42,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 01:57:42,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 01:57:42,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,746 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:42,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:42,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 01:57:42,752 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 01:57:42,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 01:57:42,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:42,762 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 01:57:42,763 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:57:42,763 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2037760641] [2021-11-17 01:57:42,763 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2037760641] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:57:42,763 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:57:42,763 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 01:57:42,763 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1371539764] [2021-11-17 01:57:42,763 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:57:42,764 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 01:57:42,764 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:57:42,764 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 01:57:42,764 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 01:57:42,765 INFO L87 Difference]: Start difference. First operand 15404 states and 22936 transitions. Second operand has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:58,951 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:57:58,951 INFO L93 Difference]: Finished difference Result 32895 states and 49558 transitions. [2021-11-17 01:57:58,953 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 01:57:58,954 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 282 [2021-11-17 01:57:58,954 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:57:59,013 INFO L225 Difference]: With dead ends: 32895 [2021-11-17 01:57:59,013 INFO L226 Difference]: Without dead ends: 17524 [2021-11-17 01:57:59,044 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 01:57:59,045 INFO L933 BasicCegarLoop]: 1910 mSDtfsCounter, 3438 mSDsluCounter, 4773 mSDsCounter, 0 mSdLazyCounter, 7705 mSolverCounterSat, 2274 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3704 SdHoareTripleChecker+Valid, 6683 SdHoareTripleChecker+Invalid, 9979 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2274 IncrementalHoareTripleChecker+Valid, 7705 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:57:59,045 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3704 Valid, 6683 Invalid, 9979 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2274 Valid, 7705 Invalid, 0 Unknown, 0 Unchecked, 15.1s Time] [2021-11-17 01:57:59,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17524 states. [2021-11-17 01:57:59,679 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17524 to 15384. [2021-11-17 01:57:59,692 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15384 states, 10710 states have (on average 1.3786181139122315) internal successors, (14765), 11342 states have internal predecessors, (14765), 3559 states have call successors, (3559), 860 states have call predecessors, (3559), 1114 states have return successors, (4552), 3525 states have call predecessors, (4552), 3557 states have call successors, (4552) [2021-11-17 01:57:59,734 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15384 states to 15384 states and 22876 transitions. [2021-11-17 01:57:59,738 INFO L78 Accepts]: Start accepts. Automaton has 15384 states and 22876 transitions. Word has length 282 [2021-11-17 01:57:59,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:57:59,738 INFO L470 AbstractCegarLoop]: Abstraction has 15384 states and 22876 transitions. [2021-11-17 01:57:59,738 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 01:57:59,738 INFO L276 IsEmpty]: Start isEmpty. Operand 15384 states and 22876 transitions. [2021-11-17 01:57:59,754 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 297 [2021-11-17 01:57:59,754 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:57:59,754 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:57:59,754 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-11-17 01:57:59,755 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:57:59,755 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:57:59,755 INFO L85 PathProgramCache]: Analyzing trace with hash 790150926, now seen corresponding path program 1 times [2021-11-17 01:57:59,755 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:57:59,755 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1168074032] [2021-11-17 01:57:59,755 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:57:59,756 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:57:59,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:57:59,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:59,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:57:59,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:59,886 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,888 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:57:59,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:59,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:57:59,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:59,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:57:59,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:57:59,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 01:57:59,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,949 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:59,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-11-17 01:57:59,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,960 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:57:59,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,968 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-11-17 01:57:59,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-11-17 01:57:59,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-11-17 01:57:59,978 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,981 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-17 01:57:59,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 01:57:59,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,989 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:57:59,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:57:59,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-11-17 01:57:59,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 213 [2021-11-17 01:58:00,002 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-11-17 01:58:00,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 226 [2021-11-17 01:58:00,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-11-17 01:58:00,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-11-17 01:58:00,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-11-17 01:58:00,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-11-17 01:58:00,048 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,051 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-11-17 01:58:00,053 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-11-17 01:58:00,058 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-11-17 01:58:00,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,064 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-11-17 01:58:00,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,068 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-11-17 01:58:00,069 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,072 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 0 proven. 12 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-11-17 01:58:00,073 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:58:00,073 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1168074032] [2021-11-17 01:58:00,073 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1168074032] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 01:58:00,073 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1792798286] [2021-11-17 01:58:00,073 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:00,074 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 01:58:00,074 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:58:00,082 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 01:58:00,103 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-17 01:58:00,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:00,665 INFO L263 TraceCheckSpWp]: Trace formula consists of 2627 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 01:58:00,686 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:58:01,115 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 12 proven. 0 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-11-17 01:58:01,116 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 01:58:01,116 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1792798286] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:58:01,116 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 01:58:01,116 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-11-17 01:58:01,116 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1940371443] [2021-11-17 01:58:01,116 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:58:01,116 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 01:58:01,117 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:58:01,117 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 01:58:01,117 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2021-11-17 01:58:01,117 INFO L87 Difference]: Start difference. First operand 15384 states and 22876 transitions. Second operand has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-17 01:58:02,354 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:58:02,354 INFO L93 Difference]: Finished difference Result 27882 states and 41542 transitions. [2021-11-17 01:58:02,355 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 01:58:02,355 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 296 [2021-11-17 01:58:02,355 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:58:02,456 INFO L225 Difference]: With dead ends: 27882 [2021-11-17 01:58:02,457 INFO L226 Difference]: Without dead ends: 21655 [2021-11-17 01:58:02,490 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 386 GetRequests, 372 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2021-11-17 01:58:02,491 INFO L933 BasicCegarLoop]: 4291 mSDtfsCounter, 2798 mSDsluCounter, 10019 mSDsCounter, 0 mSdLazyCounter, 152 mSolverCounterSat, 239 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2820 SdHoareTripleChecker+Valid, 14310 SdHoareTripleChecker+Invalid, 391 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 239 IncrementalHoareTripleChecker+Valid, 152 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-17 01:58:02,491 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2820 Valid, 14310 Invalid, 391 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [239 Valid, 152 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-17 01:58:02,513 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21655 states. [2021-11-17 01:58:03,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21655 to 15408. [2021-11-17 01:58:03,301 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15408 states, 10724 states have (on average 1.378123834390153) internal successors, (14779), 11358 states have internal predecessors, (14779), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1114 states have return successors, (4564), 3535 states have call predecessors, (4564), 3567 states have call successors, (4564) [2021-11-17 01:58:03,356 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15408 states to 15408 states and 22912 transitions. [2021-11-17 01:58:03,359 INFO L78 Accepts]: Start accepts. Automaton has 15408 states and 22912 transitions. Word has length 296 [2021-11-17 01:58:03,359 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:58:03,359 INFO L470 AbstractCegarLoop]: Abstraction has 15408 states and 22912 transitions. [2021-11-17 01:58:03,360 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.2) internal successors, (116), 5 states have internal predecessors, (116), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-17 01:58:03,360 INFO L276 IsEmpty]: Start isEmpty. Operand 15408 states and 22912 transitions. [2021-11-17 01:58:03,378 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 297 [2021-11-17 01:58:03,378 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:58:03,378 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:58:03,403 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-17 01:58:03,579 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-11-17 01:58:03,579 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:58:03,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:58:03,580 INFO L85 PathProgramCache]: Analyzing trace with hash -1903745264, now seen corresponding path program 1 times [2021-11-17 01:58:03,580 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:58:03,580 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [707044140] [2021-11-17 01:58:03,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:03,580 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:58:03,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:58:03,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:03,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:58:03,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:03,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:58:03,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:03,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:58:03,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:03,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,894 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:58:03,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 01:58:03,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 108 [2021-11-17 01:58:03,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,920 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:03,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-11-17 01:58:03,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:03,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,947 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 152 [2021-11-17 01:58:03,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 163 [2021-11-17 01:58:03,975 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-11-17 01:58:03,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-17 01:58:03,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,990 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 01:58:03,993 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:03,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:03,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 189 [2021-11-17 01:58:04,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 213 [2021-11-17 01:58:04,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-11-17 01:58:04,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,047 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 226 [2021-11-17 01:58:04,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-11-17 01:58:04,054 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,058 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 239 [2021-11-17 01:58:04,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-11-17 01:58:04,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 252 [2021-11-17 01:58:04,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,075 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-11-17 01:58:04,077 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 265 [2021-11-17 01:58:04,083 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-11-17 01:58:04,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 278 [2021-11-17 01:58:04,095 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,101 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-11-17 01:58:04,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,108 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 355 trivial. 0 not checked. [2021-11-17 01:58:04,108 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:58:04,108 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [707044140] [2021-11-17 01:58:04,109 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [707044140] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 01:58:04,109 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1901794252] [2021-11-17 01:58:04,109 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:04,109 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 01:58:04,109 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:58:04,110 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 01:58:04,111 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-17 01:58:04,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:04,881 INFO L263 TraceCheckSpWp]: Trace formula consists of 2622 conjuncts, 11 conjunts are in the unsatisfiable core [2021-11-17 01:58:04,889 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:58:05,309 INFO L134 CoverageAnalysis]: Checked inductivity of 369 backedges. 121 proven. 0 refuted. 0 times theorem prover too weak. 248 trivial. 0 not checked. [2021-11-17 01:58:05,310 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 01:58:05,310 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1901794252] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:58:05,310 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 01:58:05,310 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2021-11-17 01:58:05,312 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [137911818] [2021-11-17 01:58:05,313 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:58:05,313 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 01:58:05,313 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:58:05,314 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 01:58:05,314 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-11-17 01:58:05,314 INFO L87 Difference]: Start difference. First operand 15408 states and 22912 transitions. Second operand has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-11-17 01:58:06,175 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:58:06,176 INFO L93 Difference]: Finished difference Result 30827 states and 45872 transitions. [2021-11-17 01:58:06,176 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 01:58:06,177 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) Word has length 296 [2021-11-17 01:58:06,177 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:58:06,260 INFO L225 Difference]: With dead ends: 30827 [2021-11-17 01:58:06,260 INFO L226 Difference]: Without dead ends: 15438 [2021-11-17 01:58:06,315 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 384 GetRequests, 369 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=231, Unknown=0, NotChecked=0, Total=272 [2021-11-17 01:58:06,315 INFO L933 BasicCegarLoop]: 2236 mSDtfsCounter, 6 mSDsluCounter, 8930 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11166 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:58:06,316 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11166 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 01:58:06,332 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15438 states. [2021-11-17 01:58:07,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15438 to 15411. [2021-11-17 01:58:07,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15411 states, 10726 states have (on average 1.3781465597613276) internal successors, (14782), 11361 states have internal predecessors, (14782), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1115 states have return successors, (4568), 3535 states have call predecessors, (4568), 3567 states have call successors, (4568) [2021-11-17 01:58:07,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15411 states to 15411 states and 22919 transitions. [2021-11-17 01:58:07,168 INFO L78 Accepts]: Start accepts. Automaton has 15411 states and 22919 transitions. Word has length 296 [2021-11-17 01:58:07,168 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:58:07,169 INFO L470 AbstractCegarLoop]: Abstraction has 15411 states and 22919 transitions. [2021-11-17 01:58:07,169 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.4) internal successors, (122), 6 states have internal predecessors, (122), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-11-17 01:58:07,169 INFO L276 IsEmpty]: Start isEmpty. Operand 15411 states and 22919 transitions. [2021-11-17 01:58:07,188 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 299 [2021-11-17 01:58:07,188 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:58:07,188 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:58:07,211 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Ended with exit code 0 [2021-11-17 01:58:07,389 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-11-17 01:58:07,389 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:58:07,389 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:58:07,390 INFO L85 PathProgramCache]: Analyzing trace with hash -442570164, now seen corresponding path program 1 times [2021-11-17 01:58:07,390 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:58:07,390 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [299865974] [2021-11-17 01:58:07,390 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:07,390 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:58:07,459 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,537 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:58:07,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,546 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:07,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:58:07,555 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,558 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:07,562 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:58:07,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,572 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:07,573 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:58:07,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,581 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,584 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:07,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:58:07,595 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-17 01:58:07,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,611 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-11-17 01:58:07,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,622 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:07,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 131 [2021-11-17 01:58:07,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:07,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-11-17 01:58:07,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 165 [2021-11-17 01:58:07,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 170 [2021-11-17 01:58:07,673 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-11-17 01:58:07,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-11-17 01:58:07,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:07,686 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-11-17 01:58:07,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 215 [2021-11-17 01:58:07,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 219 [2021-11-17 01:58:07,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,725 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 228 [2021-11-17 01:58:07,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2021-11-17 01:58:07,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 241 [2021-11-17 01:58:07,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 245 [2021-11-17 01:58:07,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 254 [2021-11-17 01:58:07,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 258 [2021-11-17 01:58:07,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 267 [2021-11-17 01:58:07,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2021-11-17 01:58:07,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 280 [2021-11-17 01:58:07,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 284 [2021-11-17 01:58:07,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:07,775 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 12 proven. 2 refuted. 0 times theorem prover too weak. 360 trivial. 0 not checked. [2021-11-17 01:58:07,775 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:58:07,775 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [299865974] [2021-11-17 01:58:07,775 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [299865974] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 01:58:07,775 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1590532157] [2021-11-17 01:58:07,776 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:07,776 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 01:58:07,776 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:58:07,777 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 01:58:07,779 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-17 01:58:08,505 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:08,518 INFO L263 TraceCheckSpWp]: Trace formula consists of 2634 conjuncts, 12 conjunts are in the unsatisfiable core [2021-11-17 01:58:08,525 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:58:09,031 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 124 proven. 1 refuted. 0 times theorem prover too weak. 249 trivial. 0 not checked. [2021-11-17 01:58:09,031 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:58:09,728 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 363 trivial. 0 not checked. [2021-11-17 01:58:09,728 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1590532157] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 01:58:09,728 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 01:58:09,728 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 7, 7] total 20 [2021-11-17 01:58:09,729 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1032554137] [2021-11-17 01:58:09,729 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 01:58:09,730 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-11-17 01:58:09,730 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:58:09,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-11-17 01:58:09,730 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2021-11-17 01:58:09,731 INFO L87 Difference]: Start difference. First operand 15411 states and 22919 transitions. Second operand has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-11-17 01:58:15,079 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.12s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 01:58:32,580 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:58:32,580 INFO L93 Difference]: Finished difference Result 32951 states and 49660 transitions. [2021-11-17 01:58:32,582 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-17 01:58:32,583 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) Word has length 298 [2021-11-17 01:58:32,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:58:32,648 INFO L225 Difference]: With dead ends: 32951 [2021-11-17 01:58:32,649 INFO L226 Difference]: Without dead ends: 17559 [2021-11-17 01:58:32,685 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 697 GetRequests, 666 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=169, Invalid=887, Unknown=0, NotChecked=0, Total=1056 [2021-11-17 01:58:32,686 INFO L933 BasicCegarLoop]: 2027 mSDtfsCounter, 2395 mSDsluCounter, 17582 mSDsCounter, 0 mSdLazyCounter, 14758 mSolverCounterSat, 2139 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2539 SdHoareTripleChecker+Valid, 19609 SdHoareTripleChecker+Invalid, 16897 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2139 IncrementalHoareTripleChecker+Valid, 14758 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 21.4s IncrementalHoareTripleChecker+Time [2021-11-17 01:58:32,686 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2539 Valid, 19609 Invalid, 16897 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2139 Valid, 14758 Invalid, 0 Unknown, 0 Unchecked, 21.4s Time] [2021-11-17 01:58:32,699 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17559 states. [2021-11-17 01:58:33,367 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17559 to 15424. [2021-11-17 01:58:33,386 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15424 states, 10737 states have (on average 1.377852286485983) internal successors, (14794), 11370 states have internal predecessors, (14794), 3569 states have call successors, (3569), 860 states have call predecessors, (3569), 1117 states have return successors, (4577), 3539 states have call predecessors, (4577), 3567 states have call successors, (4577) [2021-11-17 01:58:33,444 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15424 states to 15424 states and 22940 transitions. [2021-11-17 01:58:33,448 INFO L78 Accepts]: Start accepts. Automaton has 15424 states and 22940 transitions. Word has length 298 [2021-11-17 01:58:33,449 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:58:33,449 INFO L470 AbstractCegarLoop]: Abstraction has 15424 states and 22940 transitions. [2021-11-17 01:58:33,449 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 18 states have (on average 11.333333333333334) internal successors, (204), 13 states have internal predecessors, (204), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-11-17 01:58:33,449 INFO L276 IsEmpty]: Start isEmpty. Operand 15424 states and 22940 transitions. [2021-11-17 01:58:33,467 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 307 [2021-11-17 01:58:33,468 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:58:33,468 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:58:33,493 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-17 01:58:33,683 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 01:58:33,683 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:58:33,684 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:58:33,684 INFO L85 PathProgramCache]: Analyzing trace with hash -380056710, now seen corresponding path program 1 times [2021-11-17 01:58:33,684 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:58:33,684 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1295421352] [2021-11-17 01:58:33,684 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:33,684 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:58:33,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,878 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:58:33,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,892 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:33,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:58:33,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:33,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:58:33,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,913 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:33,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:58:33,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:33,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:58:33,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,939 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,940 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-17 01:58:33,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,953 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-11-17 01:58:33,954 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:33,961 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,966 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-11-17 01:58:33,968 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,973 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:33,974 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,977 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:33,977 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,985 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-11-17 01:58:33,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,991 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:58:33,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,994 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-17 01:58:33,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:33,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 01:58:34,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-11-17 01:58:34,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-11-17 01:58:34,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:34,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-11-17 01:58:34,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-11-17 01:58:34,150 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-11-17 01:58:34,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-11-17 01:58:34,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,194 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-11-17 01:58:34,197 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-11-17 01:58:34,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-11-17 01:58:34,207 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,212 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-11-17 01:58:34,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-11-17 01:58:34,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-11-17 01:58:34,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-11-17 01:58:34,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-11-17 01:58:34,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,238 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-11-17 01:58:34,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:34,245 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 14 proven. 0 refuted. 0 times theorem prover too weak. 393 trivial. 0 not checked. [2021-11-17 01:58:34,245 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:58:34,245 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1295421352] [2021-11-17 01:58:34,245 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1295421352] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 01:58:34,246 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 01:58:34,246 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2021-11-17 01:58:34,246 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [484566652] [2021-11-17 01:58:34,246 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 01:58:34,247 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 01:58:34,247 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:58:34,247 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 01:58:34,247 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-11-17 01:58:34,247 INFO L87 Difference]: Start difference. First operand 15424 states and 22940 transitions. Second operand has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-11-17 01:58:56,014 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:58:56,015 INFO L93 Difference]: Finished difference Result 22345 states and 34162 transitions. [2021-11-17 01:58:56,015 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 01:58:56,015 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) Word has length 306 [2021-11-17 01:58:56,015 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:58:56,094 INFO L225 Difference]: With dead ends: 22345 [2021-11-17 01:58:56,095 INFO L226 Difference]: Without dead ends: 18807 [2021-11-17 01:58:56,115 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=124, Invalid=428, Unknown=0, NotChecked=0, Total=552 [2021-11-17 01:58:56,116 INFO L933 BasicCegarLoop]: 2646 mSDtfsCounter, 3454 mSDsluCounter, 19628 mSDsCounter, 0 mSdLazyCounter, 12613 mSolverCounterSat, 2837 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3751 SdHoareTripleChecker+Valid, 22274 SdHoareTripleChecker+Invalid, 15450 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2837 IncrementalHoareTripleChecker+Valid, 12613 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 20.4s IncrementalHoareTripleChecker+Time [2021-11-17 01:58:56,116 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3751 Valid, 22274 Invalid, 15450 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2837 Valid, 12613 Invalid, 0 Unknown, 0 Unchecked, 20.4s Time] [2021-11-17 01:58:56,132 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18807 states. [2021-11-17 01:58:56,926 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18807 to 15434. [2021-11-17 01:58:56,942 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15434 states, 10743 states have (on average 1.3776412547705483) internal successors, (14800), 11376 states have internal predecessors, (14800), 3571 states have call successors, (3571), 860 states have call predecessors, (3571), 1119 states have return successors, (4585), 3543 states have call predecessors, (4585), 3569 states have call successors, (4585) [2021-11-17 01:58:56,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15434 states to 15434 states and 22956 transitions. [2021-11-17 01:58:56,996 INFO L78 Accepts]: Start accepts. Automaton has 15434 states and 22956 transitions. Word has length 306 [2021-11-17 01:58:56,997 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:58:56,997 INFO L470 AbstractCegarLoop]: Abstraction has 15434 states and 22956 transitions. [2021-11-17 01:58:56,997 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 8.571428571428571) internal successors, (120), 7 states have internal predecessors, (120), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-11-17 01:58:56,997 INFO L276 IsEmpty]: Start isEmpty. Operand 15434 states and 22956 transitions. [2021-11-17 01:58:57,013 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 308 [2021-11-17 01:58:57,014 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:58:57,014 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:58:57,014 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-11-17 01:58:57,014 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:58:57,014 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:58:57,015 INFO L85 PathProgramCache]: Analyzing trace with hash 479316454, now seen corresponding path program 1 times [2021-11-17 01:58:57,015 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:58:57,015 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1855772013] [2021-11-17 01:58:57,015 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:57,015 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:58:57,066 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:58:57,107 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:57,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,119 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:58:57,120 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,123 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:57,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:58:57,130 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,136 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:57,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:58:57,141 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:57,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,156 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:58:57,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,176 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-17 01:58:57,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 112 [2021-11-17 01:58:57,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,277 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:57,280 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,283 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-11-17 01:58:57,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,292 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:58:57,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 156 [2021-11-17 01:58:57,325 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:58:57,329 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-17 01:58:57,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,336 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 01:58:57,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-11-17 01:58:57,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-11-17 01:58:57,346 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,348 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:58:57,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 199 [2021-11-17 01:58:57,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-11-17 01:58:57,366 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,395 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-11-17 01:58:57,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,400 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-11-17 01:58:57,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,405 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-11-17 01:58:57,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-11-17 01:58:57,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,413 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-11-17 01:58:57,415 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,417 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-11-17 01:58:57,418 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,420 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-11-17 01:58:57,422 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,424 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-11-17 01:58:57,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,428 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-11-17 01:58:57,429 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,432 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-11-17 01:58:57,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,435 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-11-17 01:58:57,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:57,440 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 389 trivial. 0 not checked. [2021-11-17 01:58:57,440 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:58:57,440 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1855772013] [2021-11-17 01:58:57,440 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1855772013] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 01:58:57,440 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1521048967] [2021-11-17 01:58:57,440 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:58:57,440 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 01:58:57,441 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:58:57,441 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 01:58:57,443 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-17 01:58:58,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:58:58,365 INFO L263 TraceCheckSpWp]: Trace formula consists of 2669 conjuncts, 19 conjunts are in the unsatisfiable core [2021-11-17 01:58:58,374 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:58:58,932 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 145 proven. 3 refuted. 0 times theorem prover too weak. 259 trivial. 0 not checked. [2021-11-17 01:58:58,932 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:58:59,659 INFO L134 CoverageAnalysis]: Checked inductivity of 407 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 389 trivial. 0 not checked. [2021-11-17 01:58:59,659 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1521048967] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 01:58:59,659 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 01:58:59,659 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 8] total 22 [2021-11-17 01:58:59,659 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1204923741] [2021-11-17 01:58:59,659 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 01:58:59,660 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-11-17 01:58:59,660 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:58:59,660 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-11-17 01:58:59,660 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-11-17 01:58:59,661 INFO L87 Difference]: Start difference. First operand 15434 states and 22956 transitions. Second operand has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 01:59:26,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 01:59:26,245 INFO L93 Difference]: Finished difference Result 32996 states and 49789 transitions. [2021-11-17 01:59:26,248 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-11-17 01:59:26,248 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 307 [2021-11-17 01:59:26,340 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 01:59:26,389 INFO L225 Difference]: With dead ends: 32996 [2021-11-17 01:59:26,389 INFO L226 Difference]: Without dead ends: 17581 [2021-11-17 01:59:26,417 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 718 GetRequests, 683 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2021-11-17 01:59:26,417 INFO L933 BasicCegarLoop]: 2036 mSDtfsCounter, 2479 mSDsluCounter, 19950 mSDsCounter, 0 mSdLazyCounter, 16449 mSolverCounterSat, 2210 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 22.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2624 SdHoareTripleChecker+Valid, 21986 SdHoareTripleChecker+Invalid, 18659 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2210 IncrementalHoareTripleChecker+Valid, 16449 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 25.1s IncrementalHoareTripleChecker+Time [2021-11-17 01:59:26,417 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2624 Valid, 21986 Invalid, 18659 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2210 Valid, 16449 Invalid, 0 Unknown, 0 Unchecked, 25.1s Time] [2021-11-17 01:59:26,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17581 states. [2021-11-17 01:59:27,082 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17581 to 15435. [2021-11-17 01:59:27,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15435 states, 10744 states have (on average 1.377699180938198) internal successors, (14802), 11377 states have internal predecessors, (14802), 3571 states have call successors, (3571), 860 states have call predecessors, (3571), 1119 states have return successors, (4585), 3543 states have call predecessors, (4585), 3569 states have call successors, (4585) [2021-11-17 01:59:27,148 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15435 states to 15435 states and 22958 transitions. [2021-11-17 01:59:27,151 INFO L78 Accepts]: Start accepts. Automaton has 15435 states and 22958 transitions. Word has length 307 [2021-11-17 01:59:27,152 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 01:59:27,152 INFO L470 AbstractCegarLoop]: Abstraction has 15435 states and 22958 transitions. [2021-11-17 01:59:27,152 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 8.95) internal successors, (179), 16 states have internal predecessors, (179), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 01:59:27,152 INFO L276 IsEmpty]: Start isEmpty. Operand 15435 states and 22958 transitions. [2021-11-17 01:59:27,168 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 310 [2021-11-17 01:59:27,168 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 01:59:27,169 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 01:59:27,190 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2021-11-17 01:59:27,369 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2021-11-17 01:59:27,370 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 01:59:27,370 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 01:59:27,370 INFO L85 PathProgramCache]: Analyzing trace with hash -590493142, now seen corresponding path program 2 times [2021-11-17 01:59:27,370 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 01:59:27,370 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [3226335] [2021-11-17 01:59:27,370 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 01:59:27,370 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 01:59:27,426 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,467 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:59:27,468 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,474 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:59:27,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 01:59:27,482 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,486 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,486 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,489 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:59:27,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 01:59:27,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,498 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:59:27,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 01:59:27,506 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,513 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:59:27,514 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,522 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 01:59:27,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-11-17 01:59:27,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 114 [2021-11-17 01:59:27,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,706 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:59:27,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 135 [2021-11-17 01:59:27,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 01:59:27,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 158 [2021-11-17 01:59:27,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,741 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 01:59:27,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-11-17 01:59:27,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 180 [2021-11-17 01:59:27,751 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 185 [2021-11-17 01:59:27,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 190 [2021-11-17 01:59:27,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,765 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 01:59:27,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 201 [2021-11-17 01:59:27,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 225 [2021-11-17 01:59:27,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 229 [2021-11-17 01:59:27,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 238 [2021-11-17 01:59:27,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2021-11-17 01:59:27,834 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 251 [2021-11-17 01:59:27,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-11-17 01:59:27,844 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 264 [2021-11-17 01:59:27,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 268 [2021-11-17 01:59:27,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 277 [2021-11-17 01:59:27,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 281 [2021-11-17 01:59:27,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 290 [2021-11-17 01:59:27,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,870 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 294 [2021-11-17 01:59:27,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 01:59:27,875 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-11-17 01:59:27,875 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 01:59:27,875 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [3226335] [2021-11-17 01:59:27,875 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [3226335] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 01:59:27,876 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [621913331] [2021-11-17 01:59:27,876 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 01:59:27,876 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 01:59:27,876 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 01:59:27,877 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 01:59:27,878 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-17 01:59:29,245 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-11-17 01:59:29,246 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 01:59:29,262 INFO L263 TraceCheckSpWp]: Trace formula consists of 2681 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-17 01:59:29,267 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 01:59:29,826 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 152 proven. 6 refuted. 0 times theorem prover too weak. 262 trivial. 0 not checked. [2021-11-17 01:59:29,826 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 01:59:30,706 INFO L134 CoverageAnalysis]: Checked inductivity of 420 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 392 trivial. 0 not checked. [2021-11-17 01:59:30,706 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [621913331] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 01:59:30,706 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 01:59:30,707 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 9] total 24 [2021-11-17 01:59:30,707 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1481734330] [2021-11-17 01:59:30,707 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 01:59:30,707 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-11-17 01:59:30,708 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 01:59:30,708 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-11-17 01:59:30,708 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-11-17 01:59:30,708 INFO L87 Difference]: Start difference. First operand 15435 states and 22958 transitions. Second operand has 24 states, 22 states have (on average 8.227272727272727) internal successors, (181), 18 states have internal predecessors, (181), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 02:00:02,730 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:02,730 INFO L93 Difference]: Finished difference Result 33027 states and 49901 transitions. [2021-11-17 02:00:02,732 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-17 02:00:02,733 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 22 states have (on average 8.227272727272727) internal successors, (181), 18 states have internal predecessors, (181), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 309 [2021-11-17 02:00:02,733 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:02,808 INFO L225 Difference]: With dead ends: 33027 [2021-11-17 02:00:02,808 INFO L226 Difference]: Without dead ends: 17611 [2021-11-17 02:00:02,854 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 725 GetRequests, 685 SyntacticMatches, 3 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 254 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=237, Invalid=1245, Unknown=0, NotChecked=0, Total=1482 [2021-11-17 02:00:02,854 INFO L933 BasicCegarLoop]: 2022 mSDtfsCounter, 3551 mSDsluCounter, 19306 mSDsCounter, 0 mSdLazyCounter, 15755 mSolverCounterSat, 3362 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 26.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3701 SdHoareTripleChecker+Valid, 21328 SdHoareTripleChecker+Invalid, 19117 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3362 IncrementalHoareTripleChecker+Valid, 15755 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 30.3s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:02,855 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3701 Valid, 21328 Invalid, 19117 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3362 Valid, 15755 Invalid, 0 Unknown, 0 Unchecked, 30.3s Time] [2021-11-17 02:00:02,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17611 states. [2021-11-17 02:00:03,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17611 to 15436. [2021-11-17 02:00:03,737 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15436 states, 10745 states have (on average 1.3777570963238717) internal successors, (14804), 11378 states have internal predecessors, (14804), 3571 states have call successors, (3571), 860 states have call predecessors, (3571), 1119 states have return successors, (4585), 3543 states have call predecessors, (4585), 3569 states have call successors, (4585) [2021-11-17 02:00:03,801 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15436 states to 15436 states and 22960 transitions. [2021-11-17 02:00:03,804 INFO L78 Accepts]: Start accepts. Automaton has 15436 states and 22960 transitions. Word has length 309 [2021-11-17 02:00:03,804 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:03,805 INFO L470 AbstractCegarLoop]: Abstraction has 15436 states and 22960 transitions. [2021-11-17 02:00:03,805 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 22 states have (on average 8.227272727272727) internal successors, (181), 18 states have internal predecessors, (181), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 02:00:03,805 INFO L276 IsEmpty]: Start isEmpty. Operand 15436 states and 22960 transitions. [2021-11-17 02:00:03,823 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-11-17 02:00:03,823 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:03,824 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:03,849 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:04,025 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:00:04,025 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:04,026 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:04,026 INFO L85 PathProgramCache]: Analyzing trace with hash -549788826, now seen corresponding path program 3 times [2021-11-17 02:00:04,026 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:00:04,026 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [248712821] [2021-11-17 02:00:04,026 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:04,026 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:00:04,382 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:00:04,383 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 02:00:04,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:00:04,954 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-17 02:00:04,955 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 02:00:04,955 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 02:00:04,957 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-11-17 02:00:04,959 INFO L732 BasicCegarLoop]: Path program histogram: [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:04,961 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 02:00:05,009 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:00:05,012 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:00:05,349 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 02:00:05 BoogieIcfgContainer [2021-11-17 02:00:05,349 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 02:00:05,350 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 02:00:05,350 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 02:00:05,350 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 02:00:05,351 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 01:55:15" (3/4) ... [2021-11-17 02:00:05,353 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 02:00:05,353 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 02:00:05,353 INFO L158 Benchmark]: Toolchain (without parser) took 295926.72ms. Allocated memory was 96.5MB in the beginning and 2.2GB in the end (delta: 2.1GB). Free memory was 54.2MB in the beginning and 388.6MB in the end (delta: -334.5MB). Peak memory consumption was 1.8GB. Max. memory is 16.1GB. [2021-11-17 02:00:05,356 INFO L158 Benchmark]: CDTParser took 0.18ms. Allocated memory is still 71.3MB. Free memory was 46.9MB in the beginning and 46.9MB in the end (delta: 45.7kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 02:00:05,356 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1692.85ms. Allocated memory was 96.5MB in the beginning and 134.2MB in the end (delta: 37.7MB). Free memory was 54.0MB in the beginning and 72.7MB in the end (delta: -18.7MB). Peak memory consumption was 50.8MB. Max. memory is 16.1GB. [2021-11-17 02:00:05,357 INFO L158 Benchmark]: Boogie Procedure Inliner took 184.74ms. Allocated memory is still 134.2MB. Free memory was 72.0MB in the beginning and 46.2MB in the end (delta: 25.8MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2021-11-17 02:00:05,358 INFO L158 Benchmark]: Boogie Preprocessor took 199.42ms. Allocated memory is still 134.2MB. Free memory was 46.2MB in the beginning and 40.8MB in the end (delta: 5.5MB). Peak memory consumption was 11.1MB. Max. memory is 16.1GB. [2021-11-17 02:00:05,358 INFO L158 Benchmark]: RCFGBuilder took 4255.39ms. Allocated memory was 134.2MB in the beginning and 314.6MB in the end (delta: 180.4MB). Free memory was 40.8MB in the beginning and 194.6MB in the end (delta: -153.9MB). Peak memory consumption was 135.7MB. Max. memory is 16.1GB. [2021-11-17 02:00:05,358 INFO L158 Benchmark]: TraceAbstraction took 289582.40ms. Allocated memory was 314.6MB in the beginning and 2.2GB in the end (delta: 1.9GB). Free memory was 194.6MB in the beginning and 389.7MB in the end (delta: -195.1MB). Peak memory consumption was 1.7GB. Max. memory is 16.1GB. [2021-11-17 02:00:05,358 INFO L158 Benchmark]: Witness Printer took 2.82ms. Allocated memory is still 2.2GB. Free memory was 389.7MB in the beginning and 388.6MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. [2021-11-17 02:00:05,362 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.18ms. Allocated memory is still 71.3MB. Free memory was 46.9MB in the beginning and 46.9MB in the end (delta: 45.7kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1692.85ms. Allocated memory was 96.5MB in the beginning and 134.2MB in the end (delta: 37.7MB). Free memory was 54.0MB in the beginning and 72.7MB in the end (delta: -18.7MB). Peak memory consumption was 50.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 184.74ms. Allocated memory is still 134.2MB. Free memory was 72.0MB in the beginning and 46.2MB in the end (delta: 25.8MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 199.42ms. Allocated memory is still 134.2MB. Free memory was 46.2MB in the beginning and 40.8MB in the end (delta: 5.5MB). Peak memory consumption was 11.1MB. Max. memory is 16.1GB. * RCFGBuilder took 4255.39ms. Allocated memory was 134.2MB in the beginning and 314.6MB in the end (delta: 180.4MB). Free memory was 40.8MB in the beginning and 194.6MB in the end (delta: -153.9MB). Peak memory consumption was 135.7MB. Max. memory is 16.1GB. * TraceAbstraction took 289582.40ms. Allocated memory was 314.6MB in the beginning and 2.2GB in the end (delta: 1.9GB). Free memory was 194.6MB in the beginning and 389.7MB in the end (delta: -195.1MB). Peak memory consumption was 1.7GB. Max. memory is 16.1GB. * Witness Printer took 2.82ms. Allocated memory is still 2.2GB. Free memory was 389.7MB in the beginning and 388.6MB in the end (delta: 1.1MB). Peak memory consumption was 2.1MB. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8151]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6893. Possible FailurePath: [L4340] int ldv_timer_state_5 = 0; [L4341] struct timer_list *ldv_timer_list_5 ; [L4342] struct timer_list *ldv_timer_list_4 ; [L4343] struct work_struct *ldv_work_struct_3_1 ; [L4344] struct mmc_host *vub300_mmc_ops_group0 ; [L4345] struct work_struct *ldv_work_struct_1_3 ; [L4346] int ldv_state_variable_0 ; [L4347] int ldv_state_variable_5 ; [L4348] int ldv_work_1_1 ; [L4349] int ldv_work_3_2 ; [L4350] int ldv_work_3_0 ; [L4351] struct work_struct *ldv_work_struct_2_3 ; [L4352] struct work_struct *ldv_work_struct_2_0 ; [L4353] struct work_struct *ldv_work_struct_2_2 ; [L4354] int ldv_timer_state_4 = 0; [L4355] int ref_cnt ; [L4356] int ldv_work_3_3 ; [L4357] int ldv_state_variable_1 ; [L4358] int ldv_state_variable_7 ; [L4359] struct work_struct *ldv_work_struct_3_3 ; [L4360] struct work_struct *ldv_work_struct_1_0 ; [L4361] struct work_struct *ldv_work_struct_1_1 ; [L4362] int ldv_work_1_3 ; [L4363] struct work_struct *ldv_work_struct_2_1 ; [L4364] struct work_struct *ldv_work_struct_3_2 ; [L4365] int ldv_state_variable_6 ; [L4366] int ldv_work_3_1 ; [L4367] int ldv_state_variable_2 ; [L4368] int ldv_work_2_0 ; [L4369] int usb_counter ; [L4370] struct work_struct *ldv_work_struct_3_0 ; [L4371] int ldv_work_1_2 ; [L4372] int LDV_IN_INTERRUPT = 1; [L4373] struct work_struct *ldv_work_struct_1_2 ; [L4374] int ldv_work_2_2 ; [L4375] int ldv_state_variable_3 ; [L4376] struct usb_interface *vub300_driver_group1 ; [L4377] int ldv_work_1_0 ; [L4378] int ldv_work_2_3 ; [L4379] int ldv_state_variable_4 ; [L4380] int ldv_work_2_1 ; [L4437] static bool limit_speed_to_24_MHz ; [L4438] static bool pad_input_to_usb_pkt ; [L4439] static bool disable_offload_processing ; [L4440] static bool force_1_bit_data_xfers ; [L4441] static bool force_polling_for_irqs ; [L4442] static int firmware_irqpoll_timeout = 1024; [L4443] static int force_max_req_size = 128; [L4444] static int firmware_rom_wait_states = 28; [L4445-L4450] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4451] struct usb_device_id const __mod_usb_device_table ; [L4452] static struct workqueue_struct *cmndworkqueue ; [L4453] static struct workqueue_struct *pollworkqueue ; [L4454] static struct workqueue_struct *deadworkqueue ; [L6440-L6442] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6853-L6859] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6932] int ldv_retval_0 ; [L6933] int ldv_retval_1 ; [L6937] int ldv_retval_3 ; [L6938] int ldv_retval_2 ; [L8154] int URB_STATE = 0; [L8155] int DEV_STATE = 0; [L8156] int INTERF_STATE = 0; [L8157] int SERIAL_STATE = 0; [L8158] void *usb_intfdata = (void *)0; [L8159] struct urb *int_urb = (struct urb *)0; [L8160] struct urb *bulk_urb = (struct urb *)0; [L8161] void (*completeFnInt)(struct urb * ) ; [L8162] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7530] struct usb_device_id *ldvarg1 ; [L7531] void *tmp ; [L7532] pm_message_t ldvarg0 ; [L7533] struct mmc_card *ldvarg4 ; [L7534] void *tmp___0 ; [L7535] struct mmc_ios *ldvarg3 ; [L7536] void *tmp___1 ; [L7537] int ldvarg5 ; [L7538] struct mmc_request *ldvarg2 ; [L7539] void *tmp___2 ; [L7540] int tmp___3 ; [L7541] int tmp___4 ; [L7542] int tmp___5 ; [L7543] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7545] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7545] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7545] tmp = ldv_init_zalloc(32UL) [L7546] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7547] CALL, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1824, \result={-36893488147419103233:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7547] RET, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1824UL)={-36893488147419103233:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7547] tmp___0 = ldv_init_zalloc(1824UL) [L7548] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7549] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={-55340232221128654849:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7549] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={-55340232221128654849:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7549] tmp___1 = ldv_init_zalloc(16UL) [L7550] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7551] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-73786976294838206465:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7551] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-73786976294838206465:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7551] tmp___2 = ldv_init_zalloc(136UL) [L7552] ldvarg2 = (struct mmc_request *)tmp___2 [L7553] FCALL ldv_initialize() [L7554] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={91:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={91:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, tmp={91:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7554] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={91:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7555] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={90:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={90:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, tmp={90:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7555] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={90:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7556] ldv_state_variable_6 = 0 [L7557] CALL work_init_3() [L6942] ldv_work_3_0 = 0 [L6943] ldv_work_3_1 = 0 [L6944] ldv_work_3_2 = 0 [L6945] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7557] RET work_init_3() [L7558] ldv_state_variable_3 = 1 [L7559] ldv_state_variable_7 = 0 [L7560] CALL work_init_2() [L6992] ldv_work_2_0 = 0 [L6993] ldv_work_2_1 = 0 [L6994] ldv_work_2_2 = 0 [L6995] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7560] RET work_init_2() [L7561] ldv_state_variable_2 = 1 [L7562] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7562] RET work_init_1() [L7563] ldv_state_variable_1 = 1 [L7564] ldv_state_variable_4 = 1 [L7565] ref_cnt = 0 [L7566] ldv_state_variable_0 = 1 [L7567] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: [L7716] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7717] COND TRUE ldv_state_variable_0 == 1 [L7718] CALL, EXPR vub300_init() [L6862] int result ; [L6863] struct lock_class_key __key ; [L6864] char const *__lock_name ; [L6865] struct workqueue_struct *tmp ; [L6866] struct lock_class_key __key___0 ; [L6867] char const *__lock_name___0 ; [L6868] struct workqueue_struct *tmp___0 ; [L6869] struct lock_class_key __key___1 ; [L6870] char const *__lock_name___1 ; [L6871] struct workqueue_struct *tmp___1 ; [L6875] __lock_name = "kvub300c" [L6876] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6877] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __key={93:0}, __key___0={94:0}, __key___1={95:0}, __lock_name={74:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6878] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] __lock_name___0 = "kvub300p" [L6885] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6886] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={93:0}, __key___0={94:0}, __key___1={95:0}, __lock_name={74:0}, __lock_name___0={77:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6887] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6893] __lock_name___1 = "kvub300d" [L6894] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6895] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={93:0}, __key___0={94:0}, __key___1={95:0}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6896] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6902] CALL, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L8056] ldv_func_ret_type___13 ldv_func_res ; [L8057] int tmp ; [L8059] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8538] return __VERIFIER_nondet_int(); [L8059] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8059] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8060] ldv_func_res = tmp [L8061] ldv_state_variable_6 = 1 [L8062] usb_counter = 0 [L8063] CALL ldv_usb_driver_6() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-92233720368547758081:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L8063] RET ldv_usb_driver_6() [L8064] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={8706:8707}, ldv_func_arg2={8706:8707}, ldv_func_arg3={83:0}, ldv_func_arg3={83:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6902] RET, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6902] result = ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6903] COND FALSE !(result != 0) [L6908] return (0); [L6908] return (0); [L6908] return (0); [L6908] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7718] RET, EXPR vub300_init() [L7718] ldv_retval_3 = vub300_init() [L7719] COND TRUE ldv_retval_3 == 0 [L7720] ldv_state_variable_0 = 3 [L7721] ldv_state_variable_7 = 1 [L7722] CALL ldv_initialize_mmc_host_ops_7() [L7001] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7003] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-110680464442257309697:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7003] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-110680464442257309697:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7003] tmp = ldv_init_zalloc(2624UL) [L7004] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7722] RET ldv_initialize_mmc_host_ops_7() [L7725] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7572] COND TRUE ldv_state_variable_6 != 0 [L7573] tmp___4 = __VERIFIER_nondet_int() [L7575] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7576] COND TRUE ldv_state_variable_6 == 1 [L7577] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6445] struct vub300_mmc_host *vub300 ; [L6446] struct usb_host_interface *iface_desc ; [L6447] struct usb_device *udev ; [L6448] struct usb_device *tmp ; [L6449] struct usb_device *tmp___0 ; [L6450] int i ; [L6451] int retval ; [L6452] struct urb *command_out_urb ; [L6453] struct urb *command_res_urb ; [L6454] struct mmc_host *mmc ; [L6455] char manufacturer[48U] ; [L6456] char product[32U] ; [L6457] char serial_number[32U] ; [L6458] void *tmp___1 ; [L6459] struct lock_class_key __key ; [L6460] struct lock_class_key __key___0 ; [L6461] int tmp___2 ; [L6462] struct usb_endpoint_descriptor *endpoint ; [L6463] int tmp___4 ; [L6464] char *tmp___5 ; [L6465] int tmp___6 ; [L6466] int tmp___7 ; [L6467] int tmp___8 ; [L6468] unsigned int tmp___9 ; [L6469] unsigned int tmp___10 ; [L6470] unsigned int tmp___11 ; [L6471] struct lock_class_key __key___1 ; [L6472] atomic_long_t __constr_expr_0 ; [L6473] struct lock_class_key __key___2 ; [L6474] struct lock_class_key __key___3 ; [L6475] atomic_long_t __constr_expr_1 ; [L6476] struct lock_class_key __key___4 ; [L6477] atomic_long_t __constr_expr_2 ; [L6478] int tmp___12 ; [L6479] int tmp___13 ; [L6481] CALL, EXPR interface_to_usbdev(interface) [L7799] struct usb_device *tmp ; [L7801] CALL, EXPR ldv_interface_to_usbdev() [L8277] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8282] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND FALSE !(tmp___0 != 0) [L4268] tmp = malloc(size) [L4269] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L4270] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L4270] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L4271] return (p); VAL [={0:0}, ={0:0}, \old(size)=1672, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8282] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8282] result = ldv_malloc(sizeof(struct usb_device)) [L8283] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8287] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-18446744073709551615:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7801] RET, EXPR ldv_interface_to_usbdev() [L7801] tmp = ldv_interface_to_usbdev() [L7802] return (tmp); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-92233720368547758081:0}, intf={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6481] RET, EXPR interface_to_usbdev(interface) [L6481] tmp = interface_to_usbdev(interface) [L6482] CALL, EXPR ldv_usb_get_dev_44(tmp) [L7996] CALL ldv_get_dev(ldv_func_arg1) [L8293] DEV_STATE = DEV_STATE + 1 [L8294] return (data); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7996] RET ldv_get_dev(ldv_func_arg1) [L7997] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-18446744073709551615:0}, ldv_func_arg1={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6482] RET, EXPR ldv_usb_get_dev_44(tmp) [L6482] tmp___0 = ldv_usb_get_dev_44(tmp) [L6483] udev = tmp___0 [L6484] retval = -12 [L6485] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6485-L6486] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=125, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={106:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8556] return __VERIFIER_nondet_int(); [L6485-L6486] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=126, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6487] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6487] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=127, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={109:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8556] return __VERIFIER_nondet_int(); [L6487] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=128, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6488] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=129, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6488-L6489] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=129, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0={0:0}, arg2={114:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8556] return __VERIFIER_nondet_int(); [L6488-L6489] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __key___4={107:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=129, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=130, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6491] udev->descriptor.idVendor [L6491] udev->descriptor.idProduct [L6493] CALL, EXPR ldv_usb_alloc_urb_45(0, 208U) [L8002] ldv_func_ret_type___11 ldv_func_res ; [L8003] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8005] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8514] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND TRUE tmp___0 != 0 [L4266] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8514] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg0=0, arg1=208, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8514] return ldv_malloc(sizeof(struct urb)); [L8005] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8005] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8006] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8007] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8186] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8007] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8008] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6493] RET, EXPR ldv_usb_alloc_urb_45(0, 208U) [L6493] command_out_urb = ldv_usb_alloc_urb_45(0, 208U) [L6494] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6495] retval = -12 [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, command_out_urb={0:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-18446744073709551617:0}, id={-18446744073709551617:0}, int_urb={0:0}, INTERF_STATE=0, interface={-92233720368547758081:0}, interface={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, retval=-12, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7577] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7577] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7578] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7709] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7710] CALL vub300_exit() [L6922] CALL ldv_usb_deregister_61(& vub300_driver) [L8094] FCALL usb_deregister(arg) [L8095] ldv_state_variable_6 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, arg={86:0}, arg={86:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6922] RET ldv_usb_deregister_61(& vub300_driver) [L6923] CALL ldv_flush_workqueue_62(cmndworkqueue) [L8102] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8103] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8103] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6923] RET ldv_flush_workqueue_62(cmndworkqueue) [L6924] CALL ldv_flush_workqueue_63(pollworkqueue) [L8110] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8111] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8111] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6924] RET ldv_flush_workqueue_63(pollworkqueue) [L6925] CALL ldv_flush_workqueue_64(deadworkqueue) [L8118] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8119] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8119] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6925] RET ldv_flush_workqueue_64(deadworkqueue) [L6926] CALL ldv_destroy_workqueue_65(cmndworkqueue) [L8126] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8127] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8127] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6926] RET ldv_destroy_workqueue_65(cmndworkqueue) [L6927] CALL ldv_destroy_workqueue_66(pollworkqueue) [L8134] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8135] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8135] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6927] RET ldv_destroy_workqueue_66(pollworkqueue) [L6928] CALL ldv_destroy_workqueue_67(deadworkqueue) [L8142] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8143] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=0, \old(ldv_timer_list_4)=0, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8143] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L6928] RET ldv_destroy_workqueue_67(deadworkqueue) [L7710] RET vub300_exit() [L7711] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-18446744073709551617:0}, ldvarg2={-73786976294838206465:0}, ldvarg3={-55340232221128654849:0}, ldvarg4={-36893488147419103233:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551617:0}, tmp___0={-36893488147419103233:0}, tmp___1={-55340232221128654849:0}, tmp___2={-73786976294838206465:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L7752] CALL ldv_check_final_state() [L8355] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8359] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8360] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] [L8151] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8706:8707}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-92233720368547758081:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-110680464442257309697:0}, vub300_table={87:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1582 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 289.1s, OverallIterations: 20, TraceHistogramMax: 8, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.4s, AutomataDifference: 258.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 75314 SdHoareTripleChecker+Valid, 239.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 71533 mSDsluCounter, 189425 SdHoareTripleChecker+Invalid, 216.0s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 145404 mSDsCounter, 52133 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 120702 IncrementalHoareTripleChecker+Invalid, 172835 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 52133 mSolverCounterUnsat, 44021 mSDtfsCounter, 120702 mSolverCounterSat, 1.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3922 GetRequests, 3597 SyntacticMatches, 5 SemanticMatches, 320 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1273 ImplicationChecksByTransitivity, 3.8s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=24607occurred in iteration=8, InterpolantAutomatonStates: 229, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 11.8s AutomataMinimizationTime, 19 MinimizatonAttempts, 37878 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.5s SsaConstructionTime, 3.7s SatisfiabilityAnalysisTime, 11.1s InterpolantComputationTime, 6164 NumberOfCodeBlocks, 6164 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 6740 ConstructedInterpolants, 0 QuantifiedInterpolants, 12811 SizeOfPredicates, 10 NumberOfNonLiveVariables, 13233 ConjunctsInSsa, 61 ConjunctsInUnsatCore, 27 InterpolantComputations, 16 PerfectInterpolantSequences, 7029/7158 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 02:00:05,585 WARN L435 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-11-17 02:00:05,617 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 02:00:07,368 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 02:00:07,370 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 02:00:07,403 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 02:00:07,404 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 02:00:07,406 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 02:00:07,407 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 02:00:07,411 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 02:00:07,413 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 02:00:07,416 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 02:00:07,417 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 02:00:07,420 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 02:00:07,420 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 02:00:07,422 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 02:00:07,423 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 02:00:07,426 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 02:00:07,426 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 02:00:07,428 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 02:00:07,430 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 02:00:07,434 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 02:00:07,435 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 02:00:07,436 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 02:00:07,436 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 02:00:07,438 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 02:00:07,442 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 02:00:07,443 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 02:00:07,443 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 02:00:07,444 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 02:00:07,445 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 02:00:07,445 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 02:00:07,445 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 02:00:07,446 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 02:00:07,447 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 02:00:07,448 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 02:00:07,448 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 02:00:07,449 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 02:00:07,449 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 02:00:07,449 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 02:00:07,449 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 02:00:07,451 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 02:00:07,451 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 02:00:07,454 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-17 02:00:07,485 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 02:00:07,486 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 02:00:07,487 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 02:00:07,487 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 02:00:07,488 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 02:00:07,488 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 02:00:07,489 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 02:00:07,489 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 02:00:07,489 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 02:00:07,489 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 02:00:07,490 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 02:00:07,490 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 02:00:07,490 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 02:00:07,490 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 02:00:07,490 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-17 02:00:07,491 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-17 02:00:07,491 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 02:00:07,491 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 02:00:07,491 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 02:00:07,491 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 02:00:07,491 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 02:00:07,492 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 02:00:07,492 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 02:00:07,492 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 02:00:07,492 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 02:00:07,492 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 02:00:07,492 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-17 02:00:07,492 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-17 02:00:07,493 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 02:00:07,493 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 02:00:07,493 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 02:00:07,493 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 02:00:07,493 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-17 02:00:07,494 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 1f258bb699a014f11eb0babe874a45670072f33ce1154e31a2f0110b34e4ef74 [2021-11-17 02:00:07,728 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 02:00:07,748 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 02:00:07,751 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 02:00:07,752 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 02:00:07,752 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 02:00:07,754 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:00:07,810 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/58e4f227d/99e99cc058214ef1ad72628a26eadf9c/FLAG06a3c0dce [2021-11-17 02:00:08,404 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 02:00:08,404 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:00:08,440 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/58e4f227d/99e99cc058214ef1ad72628a26eadf9c/FLAG06a3c0dce [2021-11-17 02:00:08,837 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/58e4f227d/99e99cc058214ef1ad72628a26eadf9c [2021-11-17 02:00:08,845 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 02:00:08,847 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 02:00:08,849 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 02:00:08,850 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 02:00:08,853 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 02:00:08,854 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 02:00:08" (1/1) ... [2021-11-17 02:00:08,854 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@40fd25a9 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:08, skipping insertion in model container [2021-11-17 02:00:08,855 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 02:00:08" (1/1) ... [2021-11-17 02:00:08,860 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 02:00:08,952 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 02:00:10,396 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-11-17 02:00:10,433 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 02:00:10,460 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 02:00:10,770 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i[239447,239460] [2021-11-17 02:00:10,778 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 02:00:10,851 INFO L208 MainTranslator]: Completed translation [2021-11-17 02:00:10,852 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10 WrapperNode [2021-11-17 02:00:10,852 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 02:00:10,853 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 02:00:10,853 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 02:00:10,853 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 02:00:10,858 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:10,947 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,146 INFO L137 Inliner]: procedures = 276, calls = 1811, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4395 [2021-11-17 02:00:11,147 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 02:00:11,148 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 02:00:11,148 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 02:00:11,148 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 02:00:11,168 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,168 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,209 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,210 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,336 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,352 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,377 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,404 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 02:00:11,405 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 02:00:11,405 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 02:00:11,406 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 02:00:11,407 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (1/1) ... [2021-11-17 02:00:11,413 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 02:00:11,422 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:00:11,433 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 02:00:11,455 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 02:00:11,472 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-17 02:00:11,472 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-11-17 02:00:11,472 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-11-17 02:00:11,472 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_12 [2021-11-17 02:00:11,472 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_12 [2021-11-17 02:00:11,472 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-17 02:00:11,473 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-17 02:00:11,473 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 02:00:11,473 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-17 02:00:11,473 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 02:00:11,473 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 02:00:11,473 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 02:00:11,473 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-11-17 02:00:11,473 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-11-17 02:00:11,474 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-11-17 02:00:11,474 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-11-17 02:00:11,474 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-11-17 02:00:11,474 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-11-17 02:00:11,474 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-11-17 02:00:11,474 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-11-17 02:00:11,474 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-17 02:00:11,474 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-17 02:00:11,475 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-11-17 02:00:11,475 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-11-17 02:00:11,475 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 02:00:11,475 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 02:00:11,475 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-17 02:00:11,475 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-17 02:00:11,475 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-11-17 02:00:11,475 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-11-17 02:00:11,476 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-11-17 02:00:11,476 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-11-17 02:00:11,476 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_50 [2021-11-17 02:00:11,476 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_50 [2021-11-17 02:00:11,476 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-11-17 02:00:11,477 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-11-17 02:00:11,477 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 02:00:11,477 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 02:00:11,477 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 02:00:11,477 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 02:00:11,477 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 02:00:11,478 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 02:00:11,478 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-11-17 02:00:11,478 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-11-17 02:00:11,478 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-11-17 02:00:11,478 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-11-17 02:00:11,478 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-11-17 02:00:11,478 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-11-17 02:00:11,478 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-11-17 02:00:11,479 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-11-17 02:00:11,479 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_29 [2021-11-17 02:00:11,479 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_29 [2021-11-17 02:00:11,479 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-11-17 02:00:11,480 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-11-17 02:00:11,480 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 02:00:11,481 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_27 [2021-11-17 02:00:11,481 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_27 [2021-11-17 02:00:11,481 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-11-17 02:00:11,481 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-11-17 02:00:11,482 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-11-17 02:00:11,482 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-11-17 02:00:11,482 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 02:00:11,482 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_13 [2021-11-17 02:00:11,482 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_13 [2021-11-17 02:00:11,482 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-11-17 02:00:11,482 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-11-17 02:00:11,482 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-11-17 02:00:11,483 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-11-17 02:00:11,483 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-11-17 02:00:11,483 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-11-17 02:00:11,483 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-11-17 02:00:11,483 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-11-17 02:00:11,484 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_15 [2021-11-17 02:00:11,484 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_15 [2021-11-17 02:00:11,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-17 02:00:11,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-17 02:00:11,484 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-17 02:00:11,484 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 02:00:11,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-17 02:00:11,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 02:00:11,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-17 02:00:11,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-17 02:00:11,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-17 02:00:11,485 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-17 02:00:11,485 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-11-17 02:00:11,485 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-11-17 02:00:11,486 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-11-17 02:00:11,486 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-11-17 02:00:11,486 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-11-17 02:00:11,486 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-11-17 02:00:11,487 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-11-17 02:00:11,487 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-11-17 02:00:11,487 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-11-17 02:00:11,487 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-11-17 02:00:11,488 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-11-17 02:00:11,488 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-11-17 02:00:11,488 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-11-17 02:00:11,488 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-11-17 02:00:11,489 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-11-17 02:00:11,489 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-11-17 02:00:11,489 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-11-17 02:00:11,489 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-11-17 02:00:11,489 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-11-17 02:00:11,489 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-11-17 02:00:11,489 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-17 02:00:11,490 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-17 02:00:11,490 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-11-17 02:00:11,490 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-11-17 02:00:11,490 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_4 [2021-11-17 02:00:11,490 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_4 [2021-11-17 02:00:11,490 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-11-17 02:00:11,490 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-11-17 02:00:11,491 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-11-17 02:00:11,491 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-11-17 02:00:11,491 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 02:00:11,491 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 02:00:11,492 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 02:00:11,493 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 02:00:11,494 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 02:00:11,494 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 02:00:11,494 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-11-17 02:00:11,495 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-11-17 02:00:11,496 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 02:00:11,496 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 02:00:11,496 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 02:00:11,496 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 02:00:11,496 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-11-17 02:00:11,496 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-11-17 02:00:11,496 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-11-17 02:00:11,497 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-11-17 02:00:11,497 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-17 02:00:11,497 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-11-17 02:00:11,497 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-11-17 02:00:11,497 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-17 02:00:11,497 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-17 02:00:11,497 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-11-17 02:00:11,497 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-11-17 02:00:11,498 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-17 02:00:11,498 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 02:00:11,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 02:00:11,498 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_32 [2021-11-17 02:00:11,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_32 [2021-11-17 02:00:11,498 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-11-17 02:00:11,498 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-11-17 02:00:11,498 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 02:00:11,499 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-11-17 02:00:11,499 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-11-17 02:00:11,499 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_4 [2021-11-17 02:00:11,499 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_4 [2021-11-17 02:00:11,499 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-11-17 02:00:11,499 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-11-17 02:00:11,499 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-11-17 02:00:11,499 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-11-17 02:00:11,499 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-11-17 02:00:11,500 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-11-17 02:00:11,500 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 02:00:11,500 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-11-17 02:00:11,500 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-11-17 02:00:11,500 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_9 [2021-11-17 02:00:11,500 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_9 [2021-11-17 02:00:11,500 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-17 02:00:11,500 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-17 02:00:11,501 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 02:00:11,501 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-11-17 02:00:11,501 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-11-17 02:00:11,501 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-17 02:00:11,501 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-11-17 02:00:11,501 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-11-17 02:00:11,501 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-17 02:00:11,501 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 02:00:11,502 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 02:00:11,502 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-17 02:00:11,502 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_4 [2021-11-17 02:00:11,502 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_4 [2021-11-17 02:00:11,502 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-11-17 02:00:11,502 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-11-17 02:00:11,502 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-11-17 02:00:11,502 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-11-17 02:00:11,503 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-11-17 02:00:11,503 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-11-17 02:00:11,503 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-11-17 02:00:11,503 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-11-17 02:00:11,503 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-17 02:00:11,503 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-17 02:00:11,503 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-11-17 02:00:11,503 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-11-17 02:00:11,503 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-11-17 02:00:11,504 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-11-17 02:00:11,504 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-11-17 02:00:11,504 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-11-17 02:00:11,504 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-11-17 02:00:11,504 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-11-17 02:00:11,504 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-11-17 02:00:11,504 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-11-17 02:00:11,504 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-11-17 02:00:11,504 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-11-17 02:00:11,505 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-11-17 02:00:11,505 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-11-17 02:00:11,505 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-11-17 02:00:11,505 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-11-17 02:00:11,505 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2021-11-17 02:00:11,505 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2021-11-17 02:00:11,505 INFO L130 BoogieDeclarations]: Found specification of procedure delayed_work_timer_fn [2021-11-17 02:00:11,505 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_47 [2021-11-17 02:00:11,505 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_47 [2021-11-17 02:00:11,506 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-17 02:00:11,506 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-17 02:00:11,506 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-17 02:00:11,506 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-11-17 02:00:11,506 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-11-17 02:00:11,506 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-11-17 02:00:11,506 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-11-17 02:00:11,506 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-17 02:00:11,507 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-17 02:00:11,507 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-11-17 02:00:11,507 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-11-17 02:00:11,507 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-11-17 02:00:11,507 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-11-17 02:00:11,507 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-11-17 02:00:11,507 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 02:00:11,507 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 02:00:12,140 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 02:00:12,144 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 02:00:20,393 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 02:00:36,024 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 02:00:36,044 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 02:00:36,044 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-17 02:00:36,047 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:00:36 BoogieIcfgContainer [2021-11-17 02:00:36,047 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 02:00:36,049 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 02:00:36,049 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 02:00:36,051 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 02:00:36,051 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 02:00:08" (1/3) ... [2021-11-17 02:00:36,052 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@21a82c9e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 02:00:36, skipping insertion in model container [2021-11-17 02:00:36,052 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:00:10" (2/3) ... [2021-11-17 02:00:36,052 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@21a82c9e and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 02:00:36, skipping insertion in model container [2021-11-17 02:00:36,052 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:00:36" (3/3) ... [2021-11-17 02:00:36,053 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-063f96c-1-144_1a-drivers--mmc--host--vub300.ko.unsigned-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:00:36,057 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 02:00:36,057 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 02:00:36,103 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 02:00:36,111 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 02:00:36,112 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 02:00:36,153 INFO L276 IsEmpty]: Start isEmpty. Operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) [2021-11-17 02:00:36,171 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-11-17 02:00:36,171 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:36,172 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:36,173 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:36,178 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:36,178 INFO L85 PathProgramCache]: Analyzing trace with hash -956630900, now seen corresponding path program 1 times [2021-11-17 02:00:36,188 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:36,189 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [785012121] [2021-11-17 02:00:36,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:36,189 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:36,192 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:36,193 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:36,195 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-17 02:00:36,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:00:36,786 INFO L263 TraceCheckSpWp]: Trace formula consists of 840 conjuncts, 1 conjunts are in the unsatisfiable core [2021-11-17 02:00:36,791 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:37,092 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2021-11-17 02:00:37,093 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:37,396 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2021-11-17 02:00:37,397 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:37,397 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [785012121] [2021-11-17 02:00:37,397 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [785012121] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-17 02:00:37,397 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:00:37,398 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [2] total 2 [2021-11-17 02:00:37,399 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1655918598] [2021-11-17 02:00:37,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:00:37,402 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-17 02:00:37,402 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:37,417 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-17 02:00:37,417 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-17 02:00:37,421 INFO L87 Difference]: Start difference. First operand has 1581 states, 1104 states have (on average 1.3967391304347827) internal successors, (1542), 1170 states have internal predecessors, (1542), 382 states have call successors, (382), 94 states have call predecessors, (382), 93 states have return successors, (373), 347 states have call predecessors, (373), 373 states have call successors, (373) Second operand has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 02:00:37,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:37,536 INFO L93 Difference]: Finished difference Result 3157 states and 4649 transitions. [2021-11-17 02:00:37,537 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-17 02:00:37,538 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 113 [2021-11-17 02:00:37,538 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:37,556 INFO L225 Difference]: With dead ends: 3157 [2021-11-17 02:00:37,556 INFO L226 Difference]: Without dead ends: 1565 [2021-11-17 02:00:37,566 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 224 GetRequests, 224 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-17 02:00:37,568 INFO L933 BasicCegarLoop]: 2290 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2290 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:37,568 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2290 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:00:37,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1565 states. [2021-11-17 02:00:37,686 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1565 to 1565. [2021-11-17 02:00:37,689 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1565 states, 1099 states have (on average 1.3876251137397635) internal successors, (1525), 1154 states have internal predecessors, (1525), 373 states have call successors, (373), 93 states have call predecessors, (373), 92 states have return successors, (369), 343 states have call predecessors, (369), 369 states have call successors, (369) [2021-11-17 02:00:37,697 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1565 states to 1565 states and 2267 transitions. [2021-11-17 02:00:37,699 INFO L78 Accepts]: Start accepts. Automaton has 1565 states and 2267 transitions. Word has length 113 [2021-11-17 02:00:37,700 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:37,700 INFO L470 AbstractCegarLoop]: Abstraction has 1565 states and 2267 transitions. [2021-11-17 02:00:37,700 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 28.5) internal successors, (57), 2 states have internal predecessors, (57), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 02:00:37,700 INFO L276 IsEmpty]: Start isEmpty. Operand 1565 states and 2267 transitions. [2021-11-17 02:00:37,704 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 114 [2021-11-17 02:00:37,704 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:37,704 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:37,719 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2021-11-17 02:00:37,919 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:37,920 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:37,920 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:37,920 INFO L85 PathProgramCache]: Analyzing trace with hash -1997437564, now seen corresponding path program 1 times [2021-11-17 02:00:37,921 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:37,921 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1492508634] [2021-11-17 02:00:37,921 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:37,921 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:37,921 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:37,923 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:37,924 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-17 02:00:38,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:00:38,493 INFO L263 TraceCheckSpWp]: Trace formula consists of 840 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-17 02:00:38,496 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:38,814 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-11-17 02:00:38,814 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:39,332 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-11-17 02:00:39,332 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:39,332 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1492508634] [2021-11-17 02:00:39,332 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1492508634] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-17 02:00:39,333 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:00:39,333 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 9 [2021-11-17 02:00:39,333 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1486799249] [2021-11-17 02:00:39,333 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:00:39,334 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 02:00:39,334 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:39,335 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 02:00:39,335 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-17 02:00:39,335 INFO L87 Difference]: Start difference. First operand 1565 states and 2267 transitions. Second operand has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-17 02:00:39,711 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:39,711 INFO L93 Difference]: Finished difference Result 3124 states and 4529 transitions. [2021-11-17 02:00:39,713 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 02:00:39,713 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 113 [2021-11-17 02:00:39,713 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:39,723 INFO L225 Difference]: With dead ends: 3124 [2021-11-17 02:00:39,723 INFO L226 Difference]: Without dead ends: 1568 [2021-11-17 02:00:39,729 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 217 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2021-11-17 02:00:39,730 INFO L933 BasicCegarLoop]: 2258 mSDtfsCounter, 6 mSDsluCounter, 9018 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11276 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:39,731 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11276 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 02:00:39,734 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1568 states. [2021-11-17 02:00:39,771 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1568 to 1568. [2021-11-17 02:00:39,774 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1568 states, 1101 states have (on average 1.387829246139873) internal successors, (1528), 1157 states have internal predecessors, (1528), 373 states have call successors, (373), 93 states have call predecessors, (373), 93 states have return successors, (373), 343 states have call predecessors, (373), 369 states have call successors, (373) [2021-11-17 02:00:39,784 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1568 states to 1568 states and 2274 transitions. [2021-11-17 02:00:39,785 INFO L78 Accepts]: Start accepts. Automaton has 1568 states and 2274 transitions. Word has length 113 [2021-11-17 02:00:39,785 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:39,786 INFO L470 AbstractCegarLoop]: Abstraction has 1568 states and 2274 transitions. [2021-11-17 02:00:39,786 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.6) internal successors, (53), 6 states have internal predecessors, (53), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-17 02:00:39,786 INFO L276 IsEmpty]: Start isEmpty. Operand 1568 states and 2274 transitions. [2021-11-17 02:00:39,788 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-11-17 02:00:39,789 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:39,789 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:39,810 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:40,004 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:40,005 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:40,005 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:40,006 INFO L85 PathProgramCache]: Analyzing trace with hash -54256158, now seen corresponding path program 1 times [2021-11-17 02:00:40,007 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:40,007 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1362426775] [2021-11-17 02:00:40,008 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:40,008 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:40,008 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:40,012 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:40,014 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-17 02:00:40,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:00:40,644 INFO L263 TraceCheckSpWp]: Trace formula consists of 850 conjuncts, 6 conjunts are in the unsatisfiable core [2021-11-17 02:00:40,647 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:40,990 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-11-17 02:00:40,990 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:41,695 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 02:00:41,695 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:41,695 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1362426775] [2021-11-17 02:00:41,695 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1362426775] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:00:41,695 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 02:00:41,695 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2021-11-17 02:00:41,695 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2131248229] [2021-11-17 02:00:41,695 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 02:00:41,696 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-17 02:00:41,696 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:41,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-17 02:00:41,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2021-11-17 02:00:41,696 INFO L87 Difference]: Start difference. First operand 1568 states and 2274 transitions. Second operand has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:00:42,368 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:42,369 INFO L93 Difference]: Finished difference Result 3130 states and 4543 transitions. [2021-11-17 02:00:42,371 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-17 02:00:42,372 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 115 [2021-11-17 02:00:42,373 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:42,380 INFO L225 Difference]: With dead ends: 3130 [2021-11-17 02:00:42,381 INFO L226 Difference]: Without dead ends: 1571 [2021-11-17 02:00:42,388 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 231 GetRequests, 219 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=46, Invalid=136, Unknown=0, NotChecked=0, Total=182 [2021-11-17 02:00:42,390 INFO L933 BasicCegarLoop]: 2259 mSDtfsCounter, 19 mSDsluCounter, 9019 mSDsCounter, 0 mSdLazyCounter, 91 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 21 SdHoareTripleChecker+Valid, 11278 SdHoareTripleChecker+Invalid, 96 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 91 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:42,391 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [21 Valid, 11278 Invalid, 96 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 91 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-17 02:00:42,393 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1571 states. [2021-11-17 02:00:42,426 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1571 to 1569. [2021-11-17 02:00:42,429 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1569 states, 1102 states have (on average 1.3883847549909256) internal successors, (1530), 1158 states have internal predecessors, (1530), 373 states have call successors, (373), 93 states have call predecessors, (373), 93 states have return successors, (373), 343 states have call predecessors, (373), 369 states have call successors, (373) [2021-11-17 02:00:42,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1569 states to 1569 states and 2276 transitions. [2021-11-17 02:00:42,438 INFO L78 Accepts]: Start accepts. Automaton has 1569 states and 2276 transitions. Word has length 115 [2021-11-17 02:00:42,439 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:42,439 INFO L470 AbstractCegarLoop]: Abstraction has 1569 states and 2276 transitions. [2021-11-17 02:00:42,439 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 7.555555555555555) internal successors, (68), 11 states have internal predecessors, (68), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:00:42,439 INFO L276 IsEmpty]: Start isEmpty. Operand 1569 states and 2276 transitions. [2021-11-17 02:00:42,441 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-17 02:00:42,442 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:42,442 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:42,459 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:42,659 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:42,659 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:42,659 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:42,660 INFO L85 PathProgramCache]: Analyzing trace with hash 409821892, now seen corresponding path program 2 times [2021-11-17 02:00:42,660 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:42,662 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [652357107] [2021-11-17 02:00:42,663 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 02:00:42,663 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:42,663 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:42,665 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:42,667 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-17 02:00:43,121 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 02:00:43,122 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 02:00:43,136 INFO L263 TraceCheckSpWp]: Trace formula consists of 670 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:00:43,149 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:43,868 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-11-17 02:00:43,868 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:44,192 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-11-17 02:00:44,193 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:44,193 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [652357107] [2021-11-17 02:00:44,193 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [652357107] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:00:44,193 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:00:44,193 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:00:44,193 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [394585969] [2021-11-17 02:00:44,193 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:00:44,194 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:00:44,194 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:44,194 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:00:44,194 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:44,195 INFO L87 Difference]: Start difference. First operand 1569 states and 2276 transitions. Second operand has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:44,327 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:44,328 INFO L93 Difference]: Finished difference Result 4654 states and 6900 transitions. [2021-11-17 02:00:44,328 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:00:44,328 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 117 [2021-11-17 02:00:44,330 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:44,346 INFO L225 Difference]: With dead ends: 4654 [2021-11-17 02:00:44,346 INFO L226 Difference]: Without dead ends: 3108 [2021-11-17 02:00:44,354 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 232 GetRequests, 231 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:44,356 INFO L933 BasicCegarLoop]: 2881 mSDtfsCounter, 2198 mSDsluCounter, 2258 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2198 SdHoareTripleChecker+Valid, 5139 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:44,359 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2198 Valid, 5139 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:00:44,363 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3108 states. [2021-11-17 02:00:44,436 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3108 to 3102. [2021-11-17 02:00:44,440 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3102 states, 2182 states have (on average 1.3890925756186985) internal successors, (3031), 2290 states have internal predecessors, (3031), 735 states have call successors, (735), 184 states have call predecessors, (735), 184 states have return successors, (770), 679 states have call predecessors, (770), 731 states have call successors, (770) [2021-11-17 02:00:44,452 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3102 states to 3102 states and 4536 transitions. [2021-11-17 02:00:44,453 INFO L78 Accepts]: Start accepts. Automaton has 3102 states and 4536 transitions. Word has length 117 [2021-11-17 02:00:44,454 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:44,454 INFO L470 AbstractCegarLoop]: Abstraction has 3102 states and 4536 transitions. [2021-11-17 02:00:44,454 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.333333333333332) internal successors, (64), 3 states have internal predecessors, (64), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:44,454 INFO L276 IsEmpty]: Start isEmpty. Operand 3102 states and 4536 transitions. [2021-11-17 02:00:44,457 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-11-17 02:00:44,458 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:44,458 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:44,470 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:44,670 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:44,670 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:44,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:44,671 INFO L85 PathProgramCache]: Analyzing trace with hash -180969058, now seen corresponding path program 1 times [2021-11-17 02:00:44,672 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:44,672 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [707907810] [2021-11-17 02:00:44,672 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:44,672 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:44,672 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:44,673 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:44,674 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-17 02:00:45,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:00:45,198 INFO L263 TraceCheckSpWp]: Trace formula consists of 861 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-17 02:00:45,201 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:45,514 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 02:00:45,516 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:46,336 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-11-17 02:00:46,337 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:46,337 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [707907810] [2021-11-17 02:00:46,337 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [707907810] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:00:46,337 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 02:00:46,337 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2021-11-17 02:00:46,337 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010186559] [2021-11-17 02:00:46,337 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 02:00:46,338 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 02:00:46,338 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:46,338 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 02:00:46,338 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-11-17 02:00:46,339 INFO L87 Difference]: Start difference. First operand 3102 states and 4536 transitions. Second operand has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:00:47,347 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:47,348 INFO L93 Difference]: Finished difference Result 6209 states and 9093 transitions. [2021-11-17 02:00:47,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-17 02:00:47,349 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 118 [2021-11-17 02:00:47,350 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:47,366 INFO L225 Difference]: With dead ends: 6209 [2021-11-17 02:00:47,366 INFO L226 Difference]: Without dead ends: 3116 [2021-11-17 02:00:47,378 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 223 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2021-11-17 02:00:47,379 INFO L933 BasicCegarLoop]: 2260 mSDtfsCounter, 21 mSDsluCounter, 15787 mSDsCounter, 0 mSdLazyCounter, 195 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 23 SdHoareTripleChecker+Valid, 18047 SdHoareTripleChecker+Invalid, 201 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 195 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:47,380 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [23 Valid, 18047 Invalid, 201 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 195 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-17 02:00:47,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3116 states. [2021-11-17 02:00:47,447 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3116 to 3103. [2021-11-17 02:00:47,451 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3103 states, 2183 states have (on average 1.3893724232707283) internal successors, (3033), 2291 states have internal predecessors, (3033), 735 states have call successors, (735), 184 states have call predecessors, (735), 184 states have return successors, (770), 679 states have call predecessors, (770), 731 states have call successors, (770) [2021-11-17 02:00:47,466 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3103 states to 3103 states and 4538 transitions. [2021-11-17 02:00:47,467 INFO L78 Accepts]: Start accepts. Automaton has 3103 states and 4538 transitions. Word has length 118 [2021-11-17 02:00:47,467 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:47,467 INFO L470 AbstractCegarLoop]: Abstraction has 3103 states and 4538 transitions. [2021-11-17 02:00:47,468 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 6.454545454545454) internal successors, (71), 13 states have internal predecessors, (71), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:00:47,468 INFO L276 IsEmpty]: Start isEmpty. Operand 3103 states and 4538 transitions. [2021-11-17 02:00:47,470 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 121 [2021-11-17 02:00:47,470 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:47,471 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:47,491 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:47,685 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:47,685 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:47,686 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:47,686 INFO L85 PathProgramCache]: Analyzing trace with hash 615904384, now seen corresponding path program 2 times [2021-11-17 02:00:47,687 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:47,687 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1970344232] [2021-11-17 02:00:47,687 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 02:00:47,687 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:47,687 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:47,689 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:47,690 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-17 02:00:48,130 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 02:00:48,130 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 02:00:48,145 INFO L263 TraceCheckSpWp]: Trace formula consists of 671 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:00:48,147 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:48,799 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-11-17 02:00:48,799 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:49,145 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-11-17 02:00:49,146 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:49,146 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1970344232] [2021-11-17 02:00:49,146 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1970344232] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:00:49,146 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:00:49,146 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:00:49,146 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1895172204] [2021-11-17 02:00:49,146 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:00:49,148 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:00:49,153 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:49,154 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:00:49,154 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:49,154 INFO L87 Difference]: Start difference. First operand 3103 states and 4538 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:49,329 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:49,330 INFO L93 Difference]: Finished difference Result 8900 states and 13260 transitions. [2021-11-17 02:00:49,330 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:00:49,330 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 120 [2021-11-17 02:00:49,331 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:49,367 INFO L225 Difference]: With dead ends: 8900 [2021-11-17 02:00:49,367 INFO L226 Difference]: Without dead ends: 5820 [2021-11-17 02:00:49,386 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 238 GetRequests, 237 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:49,388 INFO L933 BasicCegarLoop]: 2593 mSDtfsCounter, 1944 mSDsluCounter, 2228 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1944 SdHoareTripleChecker+Valid, 4821 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:49,388 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1944 Valid, 4821 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:00:49,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5820 states. [2021-11-17 02:00:49,544 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5820 to 5808. [2021-11-17 02:00:49,564 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5808 states, 4086 states have (on average 1.3952520802741066) internal successors, (5701), 4296 states have internal predecessors, (5701), 1371 states have call successors, (1371), 350 states have call predecessors, (1371), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-11-17 02:00:49,591 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5808 states to 5808 states and 8511 transitions. [2021-11-17 02:00:49,592 INFO L78 Accepts]: Start accepts. Automaton has 5808 states and 8511 transitions. Word has length 120 [2021-11-17 02:00:49,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:49,594 INFO L470 AbstractCegarLoop]: Abstraction has 5808 states and 8511 transitions. [2021-11-17 02:00:49,594 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:49,594 INFO L276 IsEmpty]: Start isEmpty. Operand 5808 states and 8511 transitions. [2021-11-17 02:00:49,596 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-11-17 02:00:49,596 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:49,596 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:49,611 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:49,809 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:49,810 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:49,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:49,810 INFO L85 PathProgramCache]: Analyzing trace with hash 1912625765, now seen corresponding path program 1 times [2021-11-17 02:00:49,811 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:49,811 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [980705477] [2021-11-17 02:00:49,812 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:49,812 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:49,812 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:49,813 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:49,814 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-17 02:00:50,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:00:50,381 INFO L263 TraceCheckSpWp]: Trace formula consists of 872 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-17 02:00:50,383 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:50,811 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 24 proven. 6 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-11-17 02:00:50,811 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:51,810 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-11-17 02:00:51,810 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:51,810 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [980705477] [2021-11-17 02:00:51,811 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [980705477] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:00:51,811 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 02:00:51,811 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2021-11-17 02:00:51,811 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [560453996] [2021-11-17 02:00:51,811 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 02:00:51,811 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 02:00:51,811 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:51,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 02:00:51,812 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2021-11-17 02:00:51,812 INFO L87 Difference]: Start difference. First operand 5808 states and 8511 transitions. Second operand has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:00:53,283 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:53,284 INFO L93 Difference]: Finished difference Result 11650 states and 17111 transitions. [2021-11-17 02:00:53,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 02:00:53,287 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 121 [2021-11-17 02:00:53,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:53,319 INFO L225 Difference]: With dead ends: 11650 [2021-11-17 02:00:53,320 INFO L226 Difference]: Without dead ends: 5851 [2021-11-17 02:00:53,343 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 245 GetRequests, 227 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=83, Invalid=297, Unknown=0, NotChecked=0, Total=380 [2021-11-17 02:00:53,344 INFO L933 BasicCegarLoop]: 2261 mSDtfsCounter, 26 mSDsluCounter, 20301 mSDsCounter, 0 mSdLazyCounter, 279 mSolverCounterSat, 12 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 22562 SdHoareTripleChecker+Invalid, 291 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 12 IncrementalHoareTripleChecker+Valid, 279 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:53,344 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 22562 Invalid, 291 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [12 Valid, 279 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-17 02:00:53,351 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5851 states. [2021-11-17 02:00:53,522 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5851 to 5809. [2021-11-17 02:00:53,530 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5809 states, 4087 states have (on average 1.3954000489356497) internal successors, (5703), 4297 states have internal predecessors, (5703), 1371 states have call successors, (1371), 350 states have call predecessors, (1371), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-11-17 02:00:53,550 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5809 states to 5809 states and 8513 transitions. [2021-11-17 02:00:53,553 INFO L78 Accepts]: Start accepts. Automaton has 5809 states and 8513 transitions. Word has length 121 [2021-11-17 02:00:53,553 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:53,553 INFO L470 AbstractCegarLoop]: Abstraction has 5809 states and 8513 transitions. [2021-11-17 02:00:53,553 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 5.6923076923076925) internal successors, (74), 15 states have internal predecessors, (74), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:00:53,553 INFO L276 IsEmpty]: Start isEmpty. Operand 5809 states and 8513 transitions. [2021-11-17 02:00:53,556 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 124 [2021-11-17 02:00:53,556 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:53,556 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:53,573 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:53,772 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:53,773 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:53,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:53,773 INFO L85 PathProgramCache]: Analyzing trace with hash -1080283577, now seen corresponding path program 2 times [2021-11-17 02:00:53,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:53,774 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1845822603] [2021-11-17 02:00:53,774 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 02:00:53,774 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:53,774 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:53,776 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:53,779 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-17 02:00:54,266 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 02:00:54,266 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 02:00:54,281 INFO L263 TraceCheckSpWp]: Trace formula consists of 672 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:00:54,284 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:54,822 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:00:54,822 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:55,114 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:00:55,114 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:55,114 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1845822603] [2021-11-17 02:00:55,114 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1845822603] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:00:55,114 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:00:55,114 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:00:55,114 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1873775264] [2021-11-17 02:00:55,114 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:00:55,115 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:00:55,115 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:55,115 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:00:55,115 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:55,116 INFO L87 Difference]: Start difference. First operand 5809 states and 8513 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:55,205 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:55,205 INFO L93 Difference]: Finished difference Result 5811 states and 8514 transitions. [2021-11-17 02:00:55,206 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:00:55,206 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 123 [2021-11-17 02:00:55,206 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:55,225 INFO L225 Difference]: With dead ends: 5811 [2021-11-17 02:00:55,226 INFO L226 Difference]: Without dead ends: 5808 [2021-11-17 02:00:55,228 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 244 GetRequests, 243 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:55,228 INFO L933 BasicCegarLoop]: 2264 mSDtfsCounter, 2199 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2199 SdHoareTripleChecker+Valid, 2264 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:55,228 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2199 Valid, 2264 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:00:55,232 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5808 states. [2021-11-17 02:00:55,339 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5808 to 5808. [2021-11-17 02:00:55,346 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5808 states, 4087 states have (on average 1.395155370687546) internal successors, (5702), 4296 states have internal predecessors, (5702), 1370 states have call successors, (1370), 350 states have call predecessors, (1370), 350 states have return successors, (1439), 1263 states have call predecessors, (1439), 1367 states have call successors, (1439) [2021-11-17 02:00:55,362 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5808 states to 5808 states and 8511 transitions. [2021-11-17 02:00:55,363 INFO L78 Accepts]: Start accepts. Automaton has 5808 states and 8511 transitions. Word has length 123 [2021-11-17 02:00:55,364 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:55,364 INFO L470 AbstractCegarLoop]: Abstraction has 5808 states and 8511 transitions. [2021-11-17 02:00:55,364 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:55,364 INFO L276 IsEmpty]: Start isEmpty. Operand 5808 states and 8511 transitions. [2021-11-17 02:00:55,366 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-11-17 02:00:55,366 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:55,366 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:55,378 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Ended with exit code 0 [2021-11-17 02:00:55,578 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:55,578 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:55,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:55,579 INFO L85 PathProgramCache]: Analyzing trace with hash 870411393, now seen corresponding path program 1 times [2021-11-17 02:00:55,580 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:55,580 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [828640312] [2021-11-17 02:00:55,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:55,580 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:55,580 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:55,581 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:55,582 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-17 02:00:56,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:00:56,148 INFO L263 TraceCheckSpWp]: Trace formula consists of 883 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:00:56,169 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:56,653 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:00:56,653 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:56,945 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:00:56,945 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:56,945 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [828640312] [2021-11-17 02:00:56,945 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [828640312] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:00:56,945 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:00:56,945 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:00:56,945 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2000118579] [2021-11-17 02:00:56,945 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:00:56,947 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:00:56,947 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:56,947 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:00:56,947 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:56,947 INFO L87 Difference]: Start difference. First operand 5808 states and 8511 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:57,020 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:57,021 INFO L93 Difference]: Finished difference Result 5810 states and 8512 transitions. [2021-11-17 02:00:57,021 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:00:57,021 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 124 [2021-11-17 02:00:57,021 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:57,051 INFO L225 Difference]: With dead ends: 5810 [2021-11-17 02:00:57,052 INFO L226 Difference]: Without dead ends: 5778 [2021-11-17 02:00:57,054 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 246 GetRequests, 245 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:57,056 INFO L933 BasicCegarLoop]: 2263 mSDtfsCounter, 2196 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2196 SdHoareTripleChecker+Valid, 2263 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:57,056 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2196 Valid, 2263 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:00:57,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5778 states. [2021-11-17 02:00:57,202 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5778 to 5778. [2021-11-17 02:00:57,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5778 states, 4071 states have (on average 1.395725865880619) internal successors, (5682), 4279 states have internal predecessors, (5682), 1357 states have call successors, (1357), 349 states have call predecessors, (1357), 349 states have return successors, (1427), 1251 states have call predecessors, (1427), 1355 states have call successors, (1427) [2021-11-17 02:00:57,226 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5778 states to 5778 states and 8466 transitions. [2021-11-17 02:00:57,227 INFO L78 Accepts]: Start accepts. Automaton has 5778 states and 8466 transitions. Word has length 124 [2021-11-17 02:00:57,227 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:57,227 INFO L470 AbstractCegarLoop]: Abstraction has 5778 states and 8466 transitions. [2021-11-17 02:00:57,227 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:00:57,228 INFO L276 IsEmpty]: Start isEmpty. Operand 5778 states and 8466 transitions. [2021-11-17 02:00:57,233 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 175 [2021-11-17 02:00:57,233 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:57,234 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:57,251 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-17 02:00:57,451 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:00:57,452 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:00:57,452 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:00:57,452 INFO L85 PathProgramCache]: Analyzing trace with hash -1073965636, now seen corresponding path program 1 times [2021-11-17 02:00:57,453 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:00:57,453 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1718393692] [2021-11-17 02:00:57,453 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:00:57,453 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:00:57,453 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:00:57,454 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:00:57,455 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-17 02:00:58,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:00:58,146 INFO L263 TraceCheckSpWp]: Trace formula consists of 1102 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:00:58,149 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:00:58,502 INFO L134 CoverageAnalysis]: Checked inductivity of 152 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-11-17 02:00:58,503 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:00:58,848 INFO L134 CoverageAnalysis]: Checked inductivity of 152 backedges. 2 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-11-17 02:00:58,848 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:00:58,848 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1718393692] [2021-11-17 02:00:58,848 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1718393692] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:00:58,848 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:00:58,848 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-17 02:00:58,848 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [69046745] [2021-11-17 02:00:58,848 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:00:58,849 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:00:58,849 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:00:58,849 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:00:58,849 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:58,850 INFO L87 Difference]: Start difference. First operand 5778 states and 8466 transitions. Second operand has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-17 02:00:59,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:00:59,385 INFO L93 Difference]: Finished difference Result 16681 states and 24440 transitions. [2021-11-17 02:00:59,385 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:00:59,385 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 174 [2021-11-17 02:00:59,386 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:00:59,426 INFO L225 Difference]: With dead ends: 16681 [2021-11-17 02:00:59,427 INFO L226 Difference]: Without dead ends: 10926 [2021-11-17 02:00:59,445 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 346 GetRequests, 345 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:00:59,446 INFO L933 BasicCegarLoop]: 2684 mSDtfsCounter, 1924 mSDsluCounter, 2176 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1924 SdHoareTripleChecker+Valid, 4860 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:00:59,447 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1924 Valid, 4860 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 02:00:59,460 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10926 states. [2021-11-17 02:00:59,763 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10926 to 10902. [2021-11-17 02:00:59,780 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10902 states, 7675 states have (on average 1.3985667752442996) internal successors, (10734), 8087 states have internal predecessors, (10734), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 677 states have return successors, (2685), 2339 states have call predecessors, (2685), 2547 states have call successors, (2685) [2021-11-17 02:00:59,868 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10902 states to 10902 states and 15968 transitions. [2021-11-17 02:00:59,870 INFO L78 Accepts]: Start accepts. Automaton has 10902 states and 15968 transitions. Word has length 174 [2021-11-17 02:00:59,870 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:00:59,870 INFO L470 AbstractCegarLoop]: Abstraction has 10902 states and 15968 transitions. [2021-11-17 02:00:59,871 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 30.333333333333332) internal successors, (91), 3 states have internal predecessors, (91), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-17 02:00:59,871 INFO L276 IsEmpty]: Start isEmpty. Operand 10902 states and 15968 transitions. [2021-11-17 02:00:59,885 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 213 [2021-11-17 02:00:59,886 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:00:59,886 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:00:59,908 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:00,091 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:00,092 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:00,092 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:00,092 INFO L85 PathProgramCache]: Analyzing trace with hash 1555787969, now seen corresponding path program 1 times [2021-11-17 02:01:00,093 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:00,093 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2125190883] [2021-11-17 02:01:00,093 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:00,093 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:00,094 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:00,094 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:00,097 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-17 02:01:00,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:00,953 INFO L263 TraceCheckSpWp]: Trace formula consists of 1239 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-17 02:01:00,956 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:01,372 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 209 trivial. 0 not checked. [2021-11-17 02:01:01,372 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:01,765 INFO L134 CoverageAnalysis]: Checked inductivity of 226 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 209 trivial. 0 not checked. [2021-11-17 02:01:01,766 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:01,766 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2125190883] [2021-11-17 02:01:01,766 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2125190883] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:01,766 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:01,766 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2021-11-17 02:01:01,766 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [876341199] [2021-11-17 02:01:01,766 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:01,766 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:01:01,767 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:01,767 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:01:01,767 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:01,767 INFO L87 Difference]: Start difference. First operand 10902 states and 15968 transitions. Second operand has 4 states, 4 states have (on average 28.25) internal successors, (113), 4 states have internal predecessors, (113), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 02:01:03,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:03,033 INFO L93 Difference]: Finished difference Result 24094 states and 35708 transitions. [2021-11-17 02:01:03,033 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 02:01:03,034 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 28.25) internal successors, (113), 4 states have internal predecessors, (113), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 212 [2021-11-17 02:01:03,034 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:03,097 INFO L225 Difference]: With dead ends: 24094 [2021-11-17 02:01:03,097 INFO L226 Difference]: Without dead ends: 13215 [2021-11-17 02:01:03,187 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 424 GetRequests, 421 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-17 02:01:03,188 INFO L933 BasicCegarLoop]: 2585 mSDtfsCounter, 3032 mSDsluCounter, 2323 mSDsCounter, 0 mSdLazyCounter, 123 mSolverCounterSat, 177 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3032 SdHoareTripleChecker+Valid, 4908 SdHoareTripleChecker+Invalid, 300 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 177 IncrementalHoareTripleChecker+Valid, 123 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:03,188 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3032 Valid, 4908 Invalid, 300 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [177 Valid, 123 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-17 02:01:03,196 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13215 states. [2021-11-17 02:01:03,524 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13215 to 10916. [2021-11-17 02:01:03,538 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10916 states, 7689 states have (on average 1.397841071660814) internal successors, (10748), 8101 states have internal predecessors, (10748), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 677 states have return successors, (2685), 2339 states have call predecessors, (2685), 2547 states have call successors, (2685) [2021-11-17 02:01:03,628 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10916 states to 10916 states and 15982 transitions. [2021-11-17 02:01:03,633 INFO L78 Accepts]: Start accepts. Automaton has 10916 states and 15982 transitions. Word has length 212 [2021-11-17 02:01:03,633 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:03,633 INFO L470 AbstractCegarLoop]: Abstraction has 10916 states and 15982 transitions. [2021-11-17 02:01:03,634 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 28.25) internal successors, (113), 4 states have internal predecessors, (113), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 02:01:03,634 INFO L276 IsEmpty]: Start isEmpty. Operand 10916 states and 15982 transitions. [2021-11-17 02:01:03,649 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 230 [2021-11-17 02:01:03,663 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:03,663 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:03,708 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Ended with exit code 0 [2021-11-17 02:01:03,864 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:03,864 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:03,865 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:03,865 INFO L85 PathProgramCache]: Analyzing trace with hash 672057816, now seen corresponding path program 1 times [2021-11-17 02:01:03,866 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:03,866 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [516318039] [2021-11-17 02:01:03,866 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:03,866 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:03,866 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:03,869 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:03,870 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-17 02:01:04,733 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:04,783 INFO L263 TraceCheckSpWp]: Trace formula consists of 1286 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-17 02:01:04,798 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:05,254 INFO L134 CoverageAnalysis]: Checked inductivity of 296 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 274 trivial. 0 not checked. [2021-11-17 02:01:05,254 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:05,809 INFO L134 CoverageAnalysis]: Checked inductivity of 296 backedges. 18 proven. 2 refuted. 0 times theorem prover too weak. 276 trivial. 0 not checked. [2021-11-17 02:01:05,810 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:05,810 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [516318039] [2021-11-17 02:01:05,810 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [516318039] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-17 02:01:05,810 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:01:05,810 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2021-11-17 02:01:05,810 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [207006405] [2021-11-17 02:01:05,810 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:05,811 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 02:01:05,811 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:05,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 02:01:05,811 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:01:05,812 INFO L87 Difference]: Start difference. First operand 10916 states and 15982 transitions. Second operand has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:01:06,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:06,591 INFO L93 Difference]: Finished difference Result 16593 states and 24305 transitions. [2021-11-17 02:01:06,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 02:01:06,592 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 229 [2021-11-17 02:01:06,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:06,639 INFO L225 Difference]: With dead ends: 16593 [2021-11-17 02:01:06,639 INFO L226 Difference]: Without dead ends: 10952 [2021-11-17 02:01:06,660 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 457 GetRequests, 450 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2021-11-17 02:01:06,661 INFO L933 BasicCegarLoop]: 2263 mSDtfsCounter, 1 mSDsluCounter, 6779 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9042 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:06,661 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9042 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-17 02:01:06,674 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10952 states. [2021-11-17 02:01:06,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10952 to 10932. [2021-11-17 02:01:06,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10932 states, 7701 states have (on average 1.3972211401116739) internal successors, (10760), 8113 states have internal predecessors, (10760), 2549 states have call successors, (2549), 677 states have call predecessors, (2549), 681 states have return successors, (2703), 2343 states have call predecessors, (2703), 2547 states have call successors, (2703) [2021-11-17 02:01:07,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10932 states to 10932 states and 16012 transitions. [2021-11-17 02:01:07,038 INFO L78 Accepts]: Start accepts. Automaton has 10932 states and 16012 transitions. Word has length 229 [2021-11-17 02:01:07,038 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:07,038 INFO L470 AbstractCegarLoop]: Abstraction has 10932 states and 16012 transitions. [2021-11-17 02:01:07,038 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.4) internal successors, (107), 4 states have internal predecessors, (107), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:01:07,039 INFO L276 IsEmpty]: Start isEmpty. Operand 10932 states and 16012 transitions. [2021-11-17 02:01:07,055 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 236 [2021-11-17 02:01:07,055 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:07,055 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:07,081 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:07,263 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:07,263 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:07,264 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:07,264 INFO L85 PathProgramCache]: Analyzing trace with hash 355410478, now seen corresponding path program 1 times [2021-11-17 02:01:07,265 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:07,265 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [52991376] [2021-11-17 02:01:07,265 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:07,265 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:07,265 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:07,266 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:07,268 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-17 02:01:08,232 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:08,282 INFO L263 TraceCheckSpWp]: Trace formula consists of 1301 conjuncts, 17 conjunts are in the unsatisfiable core [2021-11-17 02:01:08,286 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:09,004 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 300 trivial. 0 not checked. [2021-11-17 02:01:09,005 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:10,307 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 300 trivial. 0 not checked. [2021-11-17 02:01:10,308 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:10,308 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [52991376] [2021-11-17 02:01:10,308 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [52991376] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:10,309 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:10,309 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9, 9] imperfect sequences [] total 15 [2021-11-17 02:01:10,309 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [581025644] [2021-11-17 02:01:10,309 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:10,309 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 02:01:10,309 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:10,310 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 02:01:10,310 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=176, Unknown=0, NotChecked=0, Total=210 [2021-11-17 02:01:10,310 INFO L87 Difference]: Start difference. First operand 10932 states and 16012 transitions. Second operand has 15 states, 13 states have (on average 8.76923076923077) internal successors, (114), 11 states have internal predecessors, (114), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) [2021-11-17 02:01:11,193 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:11,193 INFO L93 Difference]: Finished difference Result 15194 states and 22441 transitions. [2021-11-17 02:01:11,194 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-17 02:01:11,194 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 8.76923076923077) internal successors, (114), 11 states have internal predecessors, (114), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) Word has length 235 [2021-11-17 02:01:11,195 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:11,251 INFO L225 Difference]: With dead ends: 15194 [2021-11-17 02:01:11,252 INFO L226 Difference]: Without dead ends: 12367 [2021-11-17 02:01:11,268 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 469 GetRequests, 455 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2021-11-17 02:01:11,268 INFO L933 BasicCegarLoop]: 2938 mSDtfsCounter, 491 mSDsluCounter, 34067 mSDsCounter, 0 mSdLazyCounter, 157 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 612 SdHoareTripleChecker+Valid, 37005 SdHoareTripleChecker+Invalid, 157 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 157 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:11,269 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [612 Valid, 37005 Invalid, 157 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 157 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-17 02:01:11,277 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12367 states. [2021-11-17 02:01:11,634 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12367 to 10950. [2021-11-17 02:01:11,646 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10950 states, 7711 states have (on average 1.3967060044092854) internal successors, (10770), 8127 states have internal predecessors, (10770), 2551 states have call successors, (2551), 677 states have call predecessors, (2551), 687 states have return successors, (2717), 2347 states have call predecessors, (2717), 2549 states have call successors, (2717) [2021-11-17 02:01:11,685 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10950 states to 10950 states and 16038 transitions. [2021-11-17 02:01:11,688 INFO L78 Accepts]: Start accepts. Automaton has 10950 states and 16038 transitions. Word has length 235 [2021-11-17 02:01:11,688 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:11,688 INFO L470 AbstractCegarLoop]: Abstraction has 10950 states and 16038 transitions. [2021-11-17 02:01:11,688 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 8.76923076923077) internal successors, (114), 11 states have internal predecessors, (114), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) [2021-11-17 02:01:11,689 INFO L276 IsEmpty]: Start isEmpty. Operand 10950 states and 16038 transitions. [2021-11-17 02:01:11,706 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-11-17 02:01:11,706 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:11,707 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:11,730 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:11,923 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:11,923 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:11,924 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:11,924 INFO L85 PathProgramCache]: Analyzing trace with hash -1166123018, now seen corresponding path program 1 times [2021-11-17 02:01:11,925 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:11,925 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [59377331] [2021-11-17 02:01:11,925 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:11,925 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:11,925 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:11,926 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:11,928 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-17 02:01:12,900 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:12,951 INFO L263 TraceCheckSpWp]: Trace formula consists of 1301 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 02:01:12,959 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:13,318 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-11-17 02:01:13,319 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:13,759 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-11-17 02:01:13,760 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:13,760 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [59377331] [2021-11-17 02:01:13,760 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [59377331] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:13,760 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:13,760 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2021-11-17 02:01:13,760 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1040820033] [2021-11-17 02:01:13,760 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:13,761 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 02:01:13,761 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:13,761 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 02:01:13,761 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:01:13,761 INFO L87 Difference]: Start difference. First operand 10950 states and 16038 transitions. Second operand has 8 states, 8 states have (on average 13.875) internal successors, (111), 8 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-17 02:01:15,803 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:01:17,811 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.01s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:01:25,769 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:25,769 INFO L93 Difference]: Finished difference Result 31358 states and 46507 transitions. [2021-11-17 02:01:25,770 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-17 02:01:25,770 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.875) internal successors, (111), 8 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) Word has length 236 [2021-11-17 02:01:25,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:25,884 INFO L225 Difference]: With dead ends: 31358 [2021-11-17 02:01:25,885 INFO L226 Difference]: Without dead ends: 25695 [2021-11-17 02:01:25,911 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 485 GetRequests, 469 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=208, Unknown=0, NotChecked=0, Total=306 [2021-11-17 02:01:25,912 INFO L933 BasicCegarLoop]: 4756 mSDtfsCounter, 7051 mSDsluCounter, 21299 mSDsCounter, 0 mSdLazyCounter, 1798 mSolverCounterSat, 781 mSolverCounterUnsat, 2 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7168 SdHoareTripleChecker+Valid, 26055 SdHoareTripleChecker+Invalid, 2581 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 781 IncrementalHoareTripleChecker+Valid, 1798 IncrementalHoareTripleChecker+Invalid, 2 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.9s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:25,912 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7168 Valid, 26055 Invalid, 2581 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [781 Valid, 1798 Invalid, 2 Unknown, 0 Unchecked, 10.9s Time] [2021-11-17 02:01:25,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25695 states. [2021-11-17 02:01:26,547 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25695 to 10972. [2021-11-17 02:01:26,559 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10972 states, 7725 states have (on average 1.3959870550161813) internal successors, (10784), 8141 states have internal predecessors, (10784), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 687 states have return successors, (2725), 2355 states have call predecessors, (2725), 2557 states have call successors, (2725) [2021-11-17 02:01:26,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10972 states to 10972 states and 16068 transitions. [2021-11-17 02:01:26,604 INFO L78 Accepts]: Start accepts. Automaton has 10972 states and 16068 transitions. Word has length 236 [2021-11-17 02:01:26,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:26,605 INFO L470 AbstractCegarLoop]: Abstraction has 10972 states and 16068 transitions. [2021-11-17 02:01:26,605 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.875) internal successors, (111), 8 states have internal predecessors, (111), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-17 02:01:26,606 INFO L276 IsEmpty]: Start isEmpty. Operand 10972 states and 16068 transitions. [2021-11-17 02:01:26,620 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 237 [2021-11-17 02:01:26,620 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:26,620 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:26,649 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:26,835 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:26,835 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:26,836 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:26,836 INFO L85 PathProgramCache]: Analyzing trace with hash 1323405944, now seen corresponding path program 1 times [2021-11-17 02:01:26,837 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:26,837 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [63965139] [2021-11-17 02:01:26,837 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:26,837 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:26,837 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:26,839 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:26,840 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-11-17 02:01:27,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:27,779 INFO L263 TraceCheckSpWp]: Trace formula consists of 1299 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:01:27,782 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:28,393 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 108 proven. 0 refuted. 0 times theorem prover too weak. 212 trivial. 0 not checked. [2021-11-17 02:01:28,393 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:28,888 INFO L134 CoverageAnalysis]: Checked inductivity of 320 backedges. 18 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-11-17 02:01:28,888 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:28,888 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [63965139] [2021-11-17 02:01:28,888 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [63965139] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:28,888 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:28,889 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:01:28,889 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [50824781] [2021-11-17 02:01:28,889 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:28,889 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:01:28,889 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:28,890 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:01:28,890 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:28,890 INFO L87 Difference]: Start difference. First operand 10972 states and 16068 transitions. Second operand has 4 states, 4 states have (on average 41.25) internal successors, (165), 4 states have internal predecessors, (165), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) [2021-11-17 02:01:30,932 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:01:35,423 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:35,423 INFO L93 Difference]: Finished difference Result 42772 states and 62715 transitions. [2021-11-17 02:01:35,423 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 02:01:35,423 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 41.25) internal successors, (165), 4 states have internal predecessors, (165), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) Word has length 236 [2021-11-17 02:01:35,424 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:35,627 INFO L225 Difference]: With dead ends: 42772 [2021-11-17 02:01:35,627 INFO L226 Difference]: Without dead ends: 31823 [2021-11-17 02:01:35,652 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 470 GetRequests, 468 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:35,653 INFO L933 BasicCegarLoop]: 5669 mSDtfsCounter, 4576 mSDsluCounter, 3628 mSDsCounter, 0 mSdLazyCounter, 704 mSolverCounterSat, 462 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4576 SdHoareTripleChecker+Valid, 9297 SdHoareTripleChecker+Invalid, 1167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 462 IncrementalHoareTripleChecker+Valid, 704 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:35,653 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4576 Valid, 9297 Invalid, 1167 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [462 Valid, 704 Invalid, 1 Unknown, 0 Unchecked, 5.5s Time] [2021-11-17 02:01:35,668 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31823 states. [2021-11-17 02:01:36,665 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31823 to 31811. [2021-11-17 02:01:36,698 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31811 states, 22463 states have (on average 1.3986555669322887) internal successors, (31418), 23655 states have internal predecessors, (31418), 7357 states have call successors, (7357), 1960 states have call predecessors, (7357), 1990 states have return successors, (7851), 6749 states have call predecessors, (7851), 7355 states have call successors, (7851) [2021-11-17 02:01:36,808 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31811 states to 31811 states and 46626 transitions. [2021-11-17 02:01:36,815 INFO L78 Accepts]: Start accepts. Automaton has 31811 states and 46626 transitions. Word has length 236 [2021-11-17 02:01:36,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:36,818 INFO L470 AbstractCegarLoop]: Abstraction has 31811 states and 46626 transitions. [2021-11-17 02:01:36,818 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 41.25) internal successors, (165), 4 states have internal predecessors, (165), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) [2021-11-17 02:01:36,818 INFO L276 IsEmpty]: Start isEmpty. Operand 31811 states and 46626 transitions. [2021-11-17 02:01:36,864 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 263 [2021-11-17 02:01:36,865 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:36,865 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:36,887 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:37,079 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:37,080 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:37,080 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:37,081 INFO L85 PathProgramCache]: Analyzing trace with hash 670401594, now seen corresponding path program 1 times [2021-11-17 02:01:37,081 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:37,081 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [870608577] [2021-11-17 02:01:37,082 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:37,082 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:37,082 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:37,102 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:37,104 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-11-17 02:01:37,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:37,912 INFO L263 TraceCheckSpWp]: Trace formula consists of 1387 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 02:01:37,915 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:38,372 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 39 proven. 0 refuted. 0 times theorem prover too weak. 238 trivial. 0 not checked. [2021-11-17 02:01:38,372 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:38,852 INFO L134 CoverageAnalysis]: Checked inductivity of 277 backedges. 19 proven. 0 refuted. 0 times theorem prover too weak. 258 trivial. 0 not checked. [2021-11-17 02:01:38,852 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:38,853 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [870608577] [2021-11-17 02:01:38,853 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [870608577] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:38,853 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:38,853 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-17 02:01:38,853 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [350052014] [2021-11-17 02:01:38,853 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:38,853 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 02:01:38,853 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:38,854 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 02:01:38,854 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 02:01:38,854 INFO L87 Difference]: Start difference. First operand 31811 states and 46626 transitions. Second operand has 5 states, 5 states have (on average 27.2) internal successors, (136), 5 states have internal predecessors, (136), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) [2021-11-17 02:01:40,894 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:01:41,661 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:41,661 INFO L93 Difference]: Finished difference Result 47698 states and 69832 transitions. [2021-11-17 02:01:41,662 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 02:01:41,662 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 27.2) internal successors, (136), 5 states have internal predecessors, (136), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) Word has length 262 [2021-11-17 02:01:41,663 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:41,722 INFO L225 Difference]: With dead ends: 47698 [2021-11-17 02:01:41,723 INFO L226 Difference]: Without dead ends: 15731 [2021-11-17 02:01:41,798 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 524 GetRequests, 519 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-17 02:01:41,799 INFO L933 BasicCegarLoop]: 2257 mSDtfsCounter, 15 mSDsluCounter, 6748 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 5 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 9005 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:41,799 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 9005 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 14 Invalid, 1 Unknown, 0 Unchecked, 2.1s Time] [2021-11-17 02:01:41,810 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15731 states. [2021-11-17 02:01:42,231 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15731 to 15721. [2021-11-17 02:01:42,245 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15721 states, 11077 states have (on average 1.3960458607926334) internal successors, (15464), 11675 states have internal predecessors, (15464), 3643 states have call successors, (3643), 988 states have call predecessors, (3643), 1000 states have return successors, (3877), 3333 states have call predecessors, (3877), 3641 states have call successors, (3877) [2021-11-17 02:01:42,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15721 states to 15721 states and 22984 transitions. [2021-11-17 02:01:42,299 INFO L78 Accepts]: Start accepts. Automaton has 15721 states and 22984 transitions. Word has length 262 [2021-11-17 02:01:42,299 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:42,299 INFO L470 AbstractCegarLoop]: Abstraction has 15721 states and 22984 transitions. [2021-11-17 02:01:42,300 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 27.2) internal successors, (136), 5 states have internal predecessors, (136), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) [2021-11-17 02:01:42,300 INFO L276 IsEmpty]: Start isEmpty. Operand 15721 states and 22984 transitions. [2021-11-17 02:01:42,326 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 289 [2021-11-17 02:01:42,326 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:42,326 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:42,347 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:42,528 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:42,529 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:42,529 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:42,529 INFO L85 PathProgramCache]: Analyzing trace with hash -372139879, now seen corresponding path program 1 times [2021-11-17 02:01:42,530 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:42,530 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [987509303] [2021-11-17 02:01:42,531 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:42,531 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:42,531 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:42,531 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:42,533 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-11-17 02:01:43,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:43,325 INFO L263 TraceCheckSpWp]: Trace formula consists of 1521 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:01:43,329 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:43,860 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:01:43,861 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:44,526 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:01:44,526 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:44,526 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [987509303] [2021-11-17 02:01:44,526 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [987509303] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:44,526 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:44,526 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:01:44,526 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [211921729] [2021-11-17 02:01:44,526 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:44,527 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:01:44,527 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:44,527 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:01:44,527 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:44,527 INFO L87 Difference]: Start difference. First operand 15721 states and 22984 transitions. Second operand has 4 states, 4 states have (on average 67.5) internal successors, (270), 4 states have internal predecessors, (270), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:45,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:45,021 INFO L93 Difference]: Finished difference Result 31385 states and 45887 transitions. [2021-11-17 02:01:45,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:01:45,022 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 67.5) internal successors, (270), 4 states have internal predecessors, (270), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 288 [2021-11-17 02:01:45,022 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:45,089 INFO L225 Difference]: With dead ends: 31385 [2021-11-17 02:01:45,089 INFO L226 Difference]: Without dead ends: 15697 [2021-11-17 02:01:45,139 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 574 GetRequests, 572 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:45,141 INFO L933 BasicCegarLoop]: 2256 mSDtfsCounter, 2246 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2246 SdHoareTripleChecker+Valid, 2256 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:45,141 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2246 Valid, 2256 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 02:01:45,155 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15697 states. [2021-11-17 02:01:45,770 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15697 to 15697. [2021-11-17 02:01:45,784 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15697 states, 11065 states have (on average 1.3953908721192951) internal successors, (15440), 11663 states have internal predecessors, (15440), 3631 states have call successors, (3631), 988 states have call predecessors, (3631), 1000 states have return successors, (3859), 3321 states have call predecessors, (3859), 3629 states have call successors, (3859) [2021-11-17 02:01:45,837 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15697 states to 15697 states and 22930 transitions. [2021-11-17 02:01:45,842 INFO L78 Accepts]: Start accepts. Automaton has 15697 states and 22930 transitions. Word has length 288 [2021-11-17 02:01:45,843 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:45,843 INFO L470 AbstractCegarLoop]: Abstraction has 15697 states and 22930 transitions. [2021-11-17 02:01:45,843 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 67.5) internal successors, (270), 4 states have internal predecessors, (270), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:45,843 INFO L276 IsEmpty]: Start isEmpty. Operand 15697 states and 22930 transitions. [2021-11-17 02:01:45,875 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 291 [2021-11-17 02:01:45,875 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:45,876 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:45,901 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:46,086 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:46,087 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:46,087 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:46,087 INFO L85 PathProgramCache]: Analyzing trace with hash 1317793432, now seen corresponding path program 1 times [2021-11-17 02:01:46,088 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:46,088 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1558221490] [2021-11-17 02:01:46,089 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:46,089 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:46,089 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:46,090 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:46,090 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2021-11-17 02:01:46,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:47,011 INFO L263 TraceCheckSpWp]: Trace formula consists of 1525 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:01:47,017 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:47,624 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:01:47,625 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:48,222 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:01:48,224 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:48,224 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1558221490] [2021-11-17 02:01:48,224 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1558221490] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:48,224 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:48,224 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:01:48,224 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2032976804] [2021-11-17 02:01:48,224 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:48,226 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:01:48,226 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:48,227 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:01:48,227 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:48,228 INFO L87 Difference]: Start difference. First operand 15697 states and 22930 transitions. Second operand has 4 states, 4 states have (on average 68.5) internal successors, (274), 4 states have internal predecessors, (274), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:48,747 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:48,747 INFO L93 Difference]: Finished difference Result 31337 states and 45779 transitions. [2021-11-17 02:01:48,748 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:01:48,748 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 68.5) internal successors, (274), 4 states have internal predecessors, (274), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 290 [2021-11-17 02:01:48,748 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:48,806 INFO L225 Difference]: With dead ends: 31337 [2021-11-17 02:01:48,806 INFO L226 Difference]: Without dead ends: 15673 [2021-11-17 02:01:48,848 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 578 GetRequests, 576 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:48,849 INFO L933 BasicCegarLoop]: 2252 mSDtfsCounter, 2240 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2240 SdHoareTripleChecker+Valid, 2252 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:48,849 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2240 Valid, 2252 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 02:01:48,859 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15673 states. [2021-11-17 02:01:49,406 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15673 to 15673. [2021-11-17 02:01:49,421 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15673 states, 11053 states have (on average 1.3947344612322445) internal successors, (15416), 11651 states have internal predecessors, (15416), 3619 states have call successors, (3619), 988 states have call predecessors, (3619), 1000 states have return successors, (3841), 3309 states have call predecessors, (3841), 3617 states have call successors, (3841) [2021-11-17 02:01:49,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15673 states to 15673 states and 22876 transitions. [2021-11-17 02:01:49,475 INFO L78 Accepts]: Start accepts. Automaton has 15673 states and 22876 transitions. Word has length 290 [2021-11-17 02:01:49,475 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:49,475 INFO L470 AbstractCegarLoop]: Abstraction has 15673 states and 22876 transitions. [2021-11-17 02:01:49,475 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 68.5) internal successors, (274), 4 states have internal predecessors, (274), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:49,476 INFO L276 IsEmpty]: Start isEmpty. Operand 15673 states and 22876 transitions. [2021-11-17 02:01:49,502 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 290 [2021-11-17 02:01:49,502 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:49,503 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:49,535 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (19)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:49,703 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:49,703 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:49,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:49,704 INFO L85 PathProgramCache]: Analyzing trace with hash 1188301001, now seen corresponding path program 1 times [2021-11-17 02:01:49,705 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:49,705 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [668173153] [2021-11-17 02:01:49,705 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:49,705 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:49,705 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:49,706 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:49,708 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (20)] Waiting until timeout for monitored process [2021-11-17 02:01:50,539 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:50,595 INFO L263 TraceCheckSpWp]: Trace formula consists of 1523 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:01:50,598 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:51,210 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:01:51,210 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:51,870 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:01:51,870 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:51,870 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [668173153] [2021-11-17 02:01:51,870 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [668173153] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:51,870 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:51,870 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:01:51,871 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1449545280] [2021-11-17 02:01:51,871 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:51,871 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:01:51,872 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:51,872 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:01:51,872 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:51,872 INFO L87 Difference]: Start difference. First operand 15673 states and 22876 transitions. Second operand has 4 states, 4 states have (on average 68.0) internal successors, (272), 4 states have internal predecessors, (272), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:52,582 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:52,583 INFO L93 Difference]: Finished difference Result 31289 states and 45671 transitions. [2021-11-17 02:01:52,583 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:01:52,583 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 68.0) internal successors, (272), 4 states have internal predecessors, (272), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 289 [2021-11-17 02:01:52,583 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:52,642 INFO L225 Difference]: With dead ends: 31289 [2021-11-17 02:01:52,643 INFO L226 Difference]: Without dead ends: 15649 [2021-11-17 02:01:52,685 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 576 GetRequests, 574 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:52,685 INFO L933 BasicCegarLoop]: 2248 mSDtfsCounter, 2237 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2237 SdHoareTripleChecker+Valid, 2248 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:52,685 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2237 Valid, 2248 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 02:01:52,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15649 states. [2021-11-17 02:01:53,175 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15649 to 15649. [2021-11-17 02:01:53,188 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15649 states, 11041 states have (on average 1.3940766234942488) internal successors, (15392), 11639 states have internal predecessors, (15392), 3607 states have call successors, (3607), 988 states have call predecessors, (3607), 1000 states have return successors, (3823), 3297 states have call predecessors, (3823), 3605 states have call successors, (3823) [2021-11-17 02:01:53,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15649 states to 15649 states and 22822 transitions. [2021-11-17 02:01:53,240 INFO L78 Accepts]: Start accepts. Automaton has 15649 states and 22822 transitions. Word has length 289 [2021-11-17 02:01:53,240 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:53,240 INFO L470 AbstractCegarLoop]: Abstraction has 15649 states and 22822 transitions. [2021-11-17 02:01:53,241 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 68.0) internal successors, (272), 4 states have internal predecessors, (272), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:53,241 INFO L276 IsEmpty]: Start isEmpty. Operand 15649 states and 22822 transitions. [2021-11-17 02:01:53,264 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-11-17 02:01:53,264 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:53,264 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:53,286 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (20)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:53,467 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:53,468 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:53,468 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:53,468 INFO L85 PathProgramCache]: Analyzing trace with hash 37556904, now seen corresponding path program 1 times [2021-11-17 02:01:53,469 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:53,469 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1022868885] [2021-11-17 02:01:53,469 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:53,469 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:53,469 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:53,470 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:53,471 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2021-11-17 02:01:54,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:01:54,290 INFO L263 TraceCheckSpWp]: Trace formula consists of 1527 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:01:54,293 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:01:54,838 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:01:54,838 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:01:55,392 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:01:55,392 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:01:55,392 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1022868885] [2021-11-17 02:01:55,392 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1022868885] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:01:55,392 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:01:55,392 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:01:55,392 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1275040763] [2021-11-17 02:01:55,392 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:01:55,393 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:01:55,393 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:01:55,393 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:01:55,393 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:55,394 INFO L87 Difference]: Start difference. First operand 15649 states and 22822 transitions. Second operand has 4 states, 4 states have (on average 69.0) internal successors, (276), 4 states have internal predecessors, (276), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:57,182 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:01:57,182 INFO L93 Difference]: Finished difference Result 31241 states and 45563 transitions. [2021-11-17 02:01:57,183 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:01:57,183 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 69.0) internal successors, (276), 4 states have internal predecessors, (276), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 291 [2021-11-17 02:01:57,183 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:01:57,238 INFO L225 Difference]: With dead ends: 31241 [2021-11-17 02:01:57,238 INFO L226 Difference]: Without dead ends: 15625 [2021-11-17 02:01:57,274 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 580 GetRequests, 578 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:01:57,274 INFO L933 BasicCegarLoop]: 2244 mSDtfsCounter, 3730 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 734 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3730 SdHoareTripleChecker+Valid, 2244 SdHoareTripleChecker+Invalid, 735 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 734 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:01:57,274 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3730 Valid, 2244 Invalid, 735 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [734 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-17 02:01:57,285 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15625 states. [2021-11-17 02:01:57,762 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15625 to 15625. [2021-11-17 02:01:57,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15625 states, 11029 states have (on average 1.3934173542478918) internal successors, (15368), 11627 states have internal predecessors, (15368), 3595 states have call successors, (3595), 988 states have call predecessors, (3595), 1000 states have return successors, (3805), 3285 states have call predecessors, (3805), 3593 states have call successors, (3805) [2021-11-17 02:01:57,821 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15625 states to 15625 states and 22768 transitions. [2021-11-17 02:01:57,824 INFO L78 Accepts]: Start accepts. Automaton has 15625 states and 22768 transitions. Word has length 291 [2021-11-17 02:01:57,825 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:01:57,825 INFO L470 AbstractCegarLoop]: Abstraction has 15625 states and 22768 transitions. [2021-11-17 02:01:57,825 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 69.0) internal successors, (276), 4 states have internal predecessors, (276), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:01:57,825 INFO L276 IsEmpty]: Start isEmpty. Operand 15625 states and 22768 transitions. [2021-11-17 02:01:57,907 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-11-17 02:01:57,907 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:01:57,907 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:01:57,932 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (21)] Forceful destruction successful, exit code 0 [2021-11-17 02:01:58,108 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:01:58,108 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:01:58,109 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:01:58,109 INFO L85 PathProgramCache]: Analyzing trace with hash -1842326138, now seen corresponding path program 1 times [2021-11-17 02:01:58,111 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:01:58,111 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [408829768] [2021-11-17 02:01:58,111 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:01:58,111 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:01:58,111 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:01:58,114 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:01:58,115 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2021-11-17 02:02:11,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:02:11,858 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 02:02:27,385 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:02:28,550 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-17 02:02:28,550 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 02:02:28,551 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 02:02:28,613 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (22)] Forceful destruction successful, exit code 0 [2021-11-17 02:02:28,779 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:02:28,782 INFO L732 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:02:28,784 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 02:02:28,837 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:02:28,840 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:02:29,164 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 02:02:29 BoogieIcfgContainer [2021-11-17 02:02:29,165 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 02:02:29,166 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 02:02:29,166 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 02:02:29,166 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 02:02:29,166 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:00:36" (3/4) ... [2021-11-17 02:02:29,168 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 02:02:29,168 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 02:02:29,169 INFO L158 Benchmark]: Toolchain (without parser) took 140322.34ms. Allocated memory was 67.1MB in the beginning and 2.3GB in the end (delta: 2.3GB). Free memory was 41.3MB in the beginning and 1.5GB in the end (delta: -1.4GB). Peak memory consumption was 851.3MB. Max. memory is 16.1GB. [2021-11-17 02:02:29,169 INFO L158 Benchmark]: CDTParser took 0.20ms. Allocated memory is still 50.3MB. Free memory was 32.1MB in the beginning and 32.1MB in the end (delta: 32.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 02:02:29,169 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2003.03ms. Allocated memory was 67.1MB in the beginning and 113.2MB in the end (delta: 46.1MB). Free memory was 41.1MB in the beginning and 49.4MB in the end (delta: -8.3MB). Peak memory consumption was 50.9MB. Max. memory is 16.1GB. [2021-11-17 02:02:29,169 INFO L158 Benchmark]: Boogie Procedure Inliner took 293.93ms. Allocated memory is still 113.2MB. Free memory was 49.4MB in the beginning and 43.3MB in the end (delta: 6.1MB). Peak memory consumption was 17.1MB. Max. memory is 16.1GB. [2021-11-17 02:02:29,172 INFO L158 Benchmark]: Boogie Preprocessor took 256.67ms. Allocated memory was 113.2MB in the beginning and 167.8MB in the end (delta: 54.5MB). Free memory was 43.3MB in the beginning and 94.3MB in the end (delta: -51.0MB). Peak memory consumption was 15.4MB. Max. memory is 16.1GB. [2021-11-17 02:02:29,173 INFO L158 Benchmark]: RCFGBuilder took 24641.91ms. Allocated memory was 167.8MB in the beginning and 335.5MB in the end (delta: 167.8MB). Free memory was 94.3MB in the beginning and 195.4MB in the end (delta: -101.0MB). Peak memory consumption was 134.9MB. Max. memory is 16.1GB. [2021-11-17 02:02:29,174 INFO L158 Benchmark]: TraceAbstraction took 113116.22ms. Allocated memory was 335.5MB in the beginning and 2.3GB in the end (delta: 2.0GB). Free memory was 194.3MB in the beginning and 1.5GB in the end (delta: -1.3GB). Peak memory consumption was 735.7MB. Max. memory is 16.1GB. [2021-11-17 02:02:29,175 INFO L158 Benchmark]: Witness Printer took 2.81ms. Allocated memory is still 2.3GB. Free memory was 1.5GB in the beginning and 1.5GB in the end (delta: 298.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 02:02:29,182 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.20ms. Allocated memory is still 50.3MB. Free memory was 32.1MB in the beginning and 32.1MB in the end (delta: 32.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2003.03ms. Allocated memory was 67.1MB in the beginning and 113.2MB in the end (delta: 46.1MB). Free memory was 41.1MB in the beginning and 49.4MB in the end (delta: -8.3MB). Peak memory consumption was 50.9MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 293.93ms. Allocated memory is still 113.2MB. Free memory was 49.4MB in the beginning and 43.3MB in the end (delta: 6.1MB). Peak memory consumption was 17.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 256.67ms. Allocated memory was 113.2MB in the beginning and 167.8MB in the end (delta: 54.5MB). Free memory was 43.3MB in the beginning and 94.3MB in the end (delta: -51.0MB). Peak memory consumption was 15.4MB. Max. memory is 16.1GB. * RCFGBuilder took 24641.91ms. Allocated memory was 167.8MB in the beginning and 335.5MB in the end (delta: 167.8MB). Free memory was 94.3MB in the beginning and 195.4MB in the end (delta: -101.0MB). Peak memory consumption was 134.9MB. Max. memory is 16.1GB. * TraceAbstraction took 113116.22ms. Allocated memory was 335.5MB in the beginning and 2.3GB in the end (delta: 2.0GB). Free memory was 194.3MB in the beginning and 1.5GB in the end (delta: -1.3GB). Peak memory consumption was 735.7MB. Max. memory is 16.1GB. * Witness Printer took 2.81ms. Allocated memory is still 2.3GB. Free memory was 1.5GB in the beginning and 1.5GB in the end (delta: 298.1kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8151]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6893. Possible FailurePath: [L4340] int ldv_timer_state_5 = 0; [L4341] struct timer_list *ldv_timer_list_5 ; [L4342] struct timer_list *ldv_timer_list_4 ; [L4343] struct work_struct *ldv_work_struct_3_1 ; [L4344] struct mmc_host *vub300_mmc_ops_group0 ; [L4345] struct work_struct *ldv_work_struct_1_3 ; [L4346] int ldv_state_variable_0 ; [L4347] int ldv_state_variable_5 ; [L4348] int ldv_work_1_1 ; [L4349] int ldv_work_3_2 ; [L4350] int ldv_work_3_0 ; [L4351] struct work_struct *ldv_work_struct_2_3 ; [L4352] struct work_struct *ldv_work_struct_2_0 ; [L4353] struct work_struct *ldv_work_struct_2_2 ; [L4354] int ldv_timer_state_4 = 0; [L4355] int ref_cnt ; [L4356] int ldv_work_3_3 ; [L4357] int ldv_state_variable_1 ; [L4358] int ldv_state_variable_7 ; [L4359] struct work_struct *ldv_work_struct_3_3 ; [L4360] struct work_struct *ldv_work_struct_1_0 ; [L4361] struct work_struct *ldv_work_struct_1_1 ; [L4362] int ldv_work_1_3 ; [L4363] struct work_struct *ldv_work_struct_2_1 ; [L4364] struct work_struct *ldv_work_struct_3_2 ; [L4365] int ldv_state_variable_6 ; [L4366] int ldv_work_3_1 ; [L4367] int ldv_state_variable_2 ; [L4368] int ldv_work_2_0 ; [L4369] int usb_counter ; [L4370] struct work_struct *ldv_work_struct_3_0 ; [L4371] int ldv_work_1_2 ; [L4372] int LDV_IN_INTERRUPT = 1; [L4373] struct work_struct *ldv_work_struct_1_2 ; [L4374] int ldv_work_2_2 ; [L4375] int ldv_state_variable_3 ; [L4376] struct usb_interface *vub300_driver_group1 ; [L4377] int ldv_work_1_0 ; [L4378] int ldv_work_2_3 ; [L4379] int ldv_state_variable_4 ; [L4380] int ldv_work_2_1 ; [L4437] static bool limit_speed_to_24_MHz ; [L4438] static bool pad_input_to_usb_pkt ; [L4439] static bool disable_offload_processing ; [L4440] static bool force_1_bit_data_xfers ; [L4441] static bool force_polling_for_irqs ; [L4442] static int firmware_irqpoll_timeout = 1024; [L4443] static int force_max_req_size = 128; [L4444] static int firmware_rom_wait_states = 28; [L4445-L4450] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4451] struct usb_device_id const __mod_usb_device_table ; [L4452] static struct workqueue_struct *cmndworkqueue ; [L4453] static struct workqueue_struct *pollworkqueue ; [L4454] static struct workqueue_struct *deadworkqueue ; [L6440-L6442] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6853-L6859] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6932] int ldv_retval_0 ; [L6933] int ldv_retval_1 ; [L6937] int ldv_retval_3 ; [L6938] int ldv_retval_2 ; [L8154] int URB_STATE = 0; [L8155] int DEV_STATE = 0; [L8156] int INTERF_STATE = 0; [L8157] int SERIAL_STATE = 0; [L8158] void *usb_intfdata = (void *)0; [L8159] struct urb *int_urb = (struct urb *)0; [L8160] struct urb *bulk_urb = (struct urb *)0; [L8161] void (*completeFnInt)(struct urb * ) ; [L8162] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7530] struct usb_device_id *ldvarg1 ; [L7531] void *tmp ; [L7532] pm_message_t ldvarg0 ; [L7533] struct mmc_card *ldvarg4 ; [L7534] void *tmp___0 ; [L7535] struct mmc_ios *ldvarg3 ; [L7536] void *tmp___1 ; [L7537] int ldvarg5 ; [L7538] struct mmc_request *ldvarg2 ; [L7539] void *tmp___2 ; [L7540] int tmp___3 ; [L7541] int tmp___4 ; [L7542] int tmp___5 ; [L7543] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7545] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524324:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524324:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={524324:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={524324:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524324:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={524324:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={524324:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={524324:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524324:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={524324:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={524324:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7545] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={524324:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7545] tmp = ldv_init_zalloc(32UL) [L7546] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7547] CALL, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4503599628419103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4503599628419103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4503599628419103:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={4503599628419103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1824, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4503599628419103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4503599628419103:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={4503599628419103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1824, \result={4503599628419103:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={4503599628419103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={4503599628419103:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1824, tmp={4503599628419103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7547] RET, EXPR ldv_init_zalloc(1824UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1824UL)={4503599628419103:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7547] tmp___0 = ldv_init_zalloc(1824UL) [L7548] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7549] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={573:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={573:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={573:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={573:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={573:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={573:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={573:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={573:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={573:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={573:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={573:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7549] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={573:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7549] tmp___1 = ldv_init_zalloc(16UL) [L7550] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7551] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836173:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836173:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637128822836173:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-6820637128822836173:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836173:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637128822836173:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-6820637128822836173:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-6820637128822836173:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836173:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637128822836173:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-6820637128822836173:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7551] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-6820637128822836173:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7551] tmp___2 = ldv_init_zalloc(136UL) [L7552] ldvarg2 = (struct mmc_request *)tmp___2 [L7553] FCALL ldv_initialize() [L7554] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018382515103:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018382515103:0}, s={-4611686018382515103:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-4611686018382515103:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018382515103:0}, s={-4611686018382515103:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-4611686018382515103:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-4611686018382515103:0}, s={-4611686018382515103:0}, SERIAL_STATE=0, tmp={-4611686018382515103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7554] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={-4611686018382515103:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7555] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-5764607523034234879:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4305] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-5764607523034234879:0}, s={-5764607523034234879:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4307] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-5764607523034234879:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-5764607523034234879:0}, s={-5764607523034234879:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4307] tmp = memset(s, c, n) [L4308] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-5764607523034234879:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-5764607523034234879:0}, s={-5764607523034234879:0}, SERIAL_STATE=0, tmp={-5764607523034234879:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7555] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={-5764607523034234879:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7556] ldv_state_variable_6 = 0 [L7557] CALL work_init_3() [L6942] ldv_work_3_0 = 0 [L6943] ldv_work_3_1 = 0 [L6944] ldv_work_3_2 = 0 [L6945] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7557] RET work_init_3() [L7558] ldv_state_variable_3 = 1 [L7559] ldv_state_variable_7 = 0 [L7560] CALL work_init_2() [L6992] ldv_work_2_0 = 0 [L6993] ldv_work_2_1 = 0 [L6994] ldv_work_2_2 = 0 [L6995] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7560] RET work_init_2() [L7561] ldv_state_variable_2 = 1 [L7562] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7562] RET work_init_1() [L7563] ldv_state_variable_1 = 1 [L7564] ldv_state_variable_4 = 1 [L7565] ref_cnt = 0 [L7566] ldv_state_variable_0 = 1 [L7567] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=6, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: [L7716] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7717] COND TRUE ldv_state_variable_0 == 1 [L7718] CALL, EXPR vub300_init() [L6862] int result ; [L6863] struct lock_class_key __key ; [L6864] char const *__lock_name ; [L6865] struct workqueue_struct *tmp ; [L6866] struct lock_class_key __key___0 ; [L6867] char const *__lock_name___0 ; [L6868] struct workqueue_struct *tmp___0 ; [L6869] struct lock_class_key __key___1 ; [L6870] char const *__lock_name___1 ; [L6871] struct workqueue_struct *tmp___1 ; [L6875] __lock_name = "kvub300c" [L6876] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6877] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={34359738368:-9223363240761614336}, __key={-4611686018427387773:0}, __key___0={-4611686018427387903:0}, __key___1={-4611686018360279039:0}, __lock_name={74:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={34359738368:-9223363240761614336}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L6878] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] __lock_name___0 = "kvub300p" [L6885] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6886] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={34359738368:-9223363240761614336}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={32896:-9223372036854775808}, __key={-4611686018427387773:0}, __key___0={-4611686018427387903:0}, __key___1={-4611686018360279039:0}, __lock_name={74:0}, __lock_name___0={77:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={34359738368:-9223363240761614336}, tmp___0={32896:-9223372036854775808}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L6887] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6893] __lock_name___1 = "kvub300d" [L6894] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6895] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={34359738368:-9223363240761614336}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-9221120237041089536:35184372088832}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={32896:-9223372036854775808}, __key={-4611686018427387773:0}, __key___0={-4611686018427387903:0}, __key___1={-4611686018360279039:0}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={34359738368:-9223363240761614336}, tmp___0={32896:-9223372036854775808}, tmp___1={-9221120237041089536:35184372088832}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L6896] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6902] CALL, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L8056] ldv_func_ret_type___13 ldv_func_res ; [L8057] int tmp ; [L8059] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8538] return __VERIFIER_nondet_int(); [L8059] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8059] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8060] ldv_func_res = tmp [L8061] ldv_state_variable_6 = 1 [L8062] usb_counter = 0 [L8063] CALL ldv_usb_driver_6() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836170:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836170:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637128822836170:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-6820637128822836170:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, cond=1, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836170:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637128822836170:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-6820637128822836170:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-6820637128822836170:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637128822836170:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637128822836170:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-6820637128822836170:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-6820637128822836170:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={-6820637128822836170:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L8063] RET ldv_usb_driver_6() [L8064] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-6820637128465055743:0}, ldv_func_arg1={-6820637128465055743:0}, ldv_func_arg2={86:85}, ldv_func_arg2={86:85}, ldv_func_arg3={83:0}, ldv_func_arg3={83:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L6902] RET, EXPR ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6902] result = ldv_usb_register_driver_57(& vub300_driver, & __this_module, "vub300") [L6903] COND FALSE !(result != 0) [L6908] return (0); [L6908] return (0); [L6908] return (0); [L6908] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={34359738368:-9223363240761614336}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={-9221120237041089536:35184372088832}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={32896:-9223372036854775808}, __lock_name={74:0}, __lock_name___0={77:0}, __lock_name___1={80:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={34359738368:-9223363240761614336}, tmp___0={32896:-9223372036854775808}, tmp___1={-9221120237041089536:35184372088832}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7718] RET, EXPR vub300_init() [L7718] ldv_retval_3 = vub300_init() [L7719] COND TRUE ldv_retval_3 == 0 [L7720] ldv_state_variable_0 = 3 [L7721] ldv_state_variable_7 = 1 [L7722] CALL ldv_initialize_mmc_host_ops_7() [L7001] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7003] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4294] void *p ; [L4295] void *tmp ; [L4297] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637129001926655:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4297] tmp = calloc(1UL, size) [L4298] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637129001926655:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637129001926655:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-6820637129001926655:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, cond=1, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4299] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637129001926655:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637129001926655:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-6820637129001926655:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L4300] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-6820637129001926655:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-6820637129001926655:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-6820637129001926655:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-6820637129001926655:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7003] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-6820637129001926655:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-6820637128822836106:0}] [L7003] tmp = ldv_init_zalloc(2624UL) [L7004] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={-6820637129001926655:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7722] RET ldv_initialize_mmc_host_ops_7() [L7725] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=6, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7572] COND TRUE ldv_state_variable_6 != 0 [L7573] tmp___4 = __VERIFIER_nondet_int() [L7575] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7576] COND TRUE ldv_state_variable_6 == 1 [L7577] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6445] struct vub300_mmc_host *vub300 ; [L6446] struct usb_host_interface *iface_desc ; [L6447] struct usb_device *udev ; [L6448] struct usb_device *tmp ; [L6449] struct usb_device *tmp___0 ; [L6450] int i ; [L6451] int retval ; [L6452] struct urb *command_out_urb ; [L6453] struct urb *command_res_urb ; [L6454] struct mmc_host *mmc ; [L6455] char manufacturer[48U] ; [L6456] char product[32U] ; [L6457] char serial_number[32U] ; [L6458] void *tmp___1 ; [L6459] struct lock_class_key __key ; [L6460] struct lock_class_key __key___0 ; [L6461] int tmp___2 ; [L6462] struct usb_endpoint_descriptor *endpoint ; [L6463] int tmp___4 ; [L6464] char *tmp___5 ; [L6465] int tmp___6 ; [L6466] int tmp___7 ; [L6467] int tmp___8 ; [L6468] unsigned int tmp___9 ; [L6469] unsigned int tmp___10 ; [L6470] unsigned int tmp___11 ; [L6471] struct lock_class_key __key___1 ; [L6472] atomic_long_t __constr_expr_0 ; [L6473] struct lock_class_key __key___2 ; [L6474] struct lock_class_key __key___3 ; [L6475] atomic_long_t __constr_expr_1 ; [L6476] struct lock_class_key __key___4 ; [L6477] atomic_long_t __constr_expr_2 ; [L6478] int tmp___12 ; [L6479] int tmp___13 ; [L6481] CALL, EXPR interface_to_usbdev(interface) [L7799] struct usb_device *tmp ; [L7801] CALL, EXPR ldv_interface_to_usbdev() [L8277] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8282] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND FALSE !(tmp___0 != 0) [L4268] tmp = malloc(size) [L4269] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2402734908121284613:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={2402734908121284613:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L4270] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L4256] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, cond=1, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L4270] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1672, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2402734908121284613:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={2402734908121284613:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L4271] return (p); VAL [={0:0}, ={0:0}, \old(size)=1672, \result={2402734908121284613:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2402734908121284613:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=1672, tmp={2402734908121284613:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8282] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={2402734908121284613:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8282] result = ldv_malloc(sizeof(struct usb_device)) [L8283] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8287] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={2402734908121284613:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, result={2402734908121284613:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7801] RET, EXPR ldv_interface_to_usbdev() [L7801] tmp = ldv_interface_to_usbdev() [L7802] return (tmp); VAL [={0:0}, ={0:0}, \result={2402734908121284613:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-6820637128822836170:0}, intf={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={2402734908121284613:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6481] RET, EXPR interface_to_usbdev(interface) [L6481] tmp = interface_to_usbdev(interface) [L6482] CALL, EXPR ldv_usb_get_dev_44(tmp) [L7996] CALL ldv_get_dev(ldv_func_arg1) [L8293] DEV_STATE = DEV_STATE + 1 [L8294] return (data); VAL [={0:0}, ={0:0}, \result={2402734908121284613:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, data={2402734908121284613:0}, data={2402734908121284613:0}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7996] RET ldv_get_dev(ldv_func_arg1) [L7997] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={2402734908121284613:0}, ldv_func_arg1={2402734908121284613:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6482] RET, EXPR ldv_usb_get_dev_44(tmp) [L6482] tmp___0 = ldv_usb_get_dev_44(tmp) [L6483] udev = tmp___0 [L6484] retval = -12 [L6485] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={-6820637128733491189:0}, __constr_expr_1={-6820637127883309055:0}, __constr_expr_2={-6820637127877853091:0}, __key={-6820637128598749183:0}, __key___0={-6820637128800599906:0}, __key___1={-6820637128822836029:0}, __key___2={-6820637128800600059:0}, __key___3={-6820637128599273468:0}, __key___4={-6820637128800599871:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={524324:0}, id={524324:0}, int_urb={0:0}, INTERF_STATE=0, interface={-6820637128822836170:0}, interface={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-6820637128732966895:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, product={-6820637128733491197:0}, ref_cnt=0, retval=4294967284, serial_number={-6820637128822834171:0}, SERIAL_STATE=0, tmp={2402734908121284613:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6485-L6486] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0={0:0}, arg2={-6820637128732966895:0}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8556] return __VERIFIER_nondet_int(); [L6485-L6486] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-6820637128733491189:0}, __constr_expr_1={-6820637127883309055:0}, __constr_expr_2={-6820637127877853091:0}, __key={-6820637128598749183:0}, __key___0={-6820637128800599906:0}, __key___1={-6820637128822836029:0}, __key___2={-6820637128800600059:0}, __key___3={-6820637128599273468:0}, __key___4={-6820637128800599871:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={524324:0}, id={524324:0}, int_urb={0:0}, INTERF_STATE=0, interface={-6820637128822836170:0}, interface={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-6820637128732966895:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, product={-6820637128733491197:0}, ref_cnt=0, retval=4294967284, serial_number={-6820637128822834171:0}, SERIAL_STATE=0, tmp={2402734908121284613:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=86, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6487] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={-6820637128733491189:0}, __constr_expr_1={-6820637127883309055:0}, __constr_expr_2={-6820637127877853091:0}, __key={-6820637128598749183:0}, __key___0={-6820637128800599906:0}, __key___1={-6820637128822836029:0}, __key___2={-6820637128800600059:0}, __key___3={-6820637128599273468:0}, __key___4={-6820637128800599871:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={524324:0}, id={524324:0}, int_urb={0:0}, INTERF_STATE=0, interface={-6820637128822836170:0}, interface={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-6820637128732966895:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, product={-6820637128733491197:0}, ref_cnt=0, retval=4294967284, serial_number={-6820637128822834171:0}, SERIAL_STATE=0, tmp={2402734908121284613:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6487] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0={0:0}, arg2={-6820637128733491197:0}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8556] return __VERIFIER_nondet_int(); [L6487] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-6820637128733491189:0}, __constr_expr_1={-6820637127883309055:0}, __constr_expr_2={-6820637127877853091:0}, __key={-6820637128598749183:0}, __key___0={-6820637128800599906:0}, __key___1={-6820637128822836029:0}, __key___2={-6820637128800600059:0}, __key___3={-6820637128599273468:0}, __key___4={-6820637128800599871:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={524324:0}, id={524324:0}, int_urb={0:0}, INTERF_STATE=0, interface={-6820637128822836170:0}, interface={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-6820637128732966895:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, product={-6820637128733491197:0}, ref_cnt=0, retval=4294967284, serial_number={-6820637128822834171:0}, SERIAL_STATE=0, tmp={2402734908121284613:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=87, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6488] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={-6820637128733491189:0}, __constr_expr_1={-6820637127883309055:0}, __constr_expr_2={-6820637127877853091:0}, __key={-6820637128598749183:0}, __key___0={-6820637128800599906:0}, __key___1={-6820637128822836029:0}, __key___2={-6820637128800600059:0}, __key___3={-6820637128599273468:0}, __key___4={-6820637128800599871:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={524324:0}, id={524324:0}, int_urb={0:0}, INTERF_STATE=0, interface={-6820637128822836170:0}, interface={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-6820637128732966895:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, product={-6820637128733491197:0}, ref_cnt=0, retval=4294967284, serial_number={-6820637128822834171:0}, SERIAL_STATE=0, tmp={2402734908121284613:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6488-L6489] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0={0:0}, arg2={-6820637128822834171:0}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8556] return __VERIFIER_nondet_int(); [L6488-L6489] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-6820637128733491189:0}, __constr_expr_1={-6820637127883309055:0}, __constr_expr_2={-6820637127877853091:0}, __key={-6820637128598749183:0}, __key___0={-6820637128800599906:0}, __key___1={-6820637128822836029:0}, __key___2={-6820637128800600059:0}, __key___3={-6820637128599273468:0}, __key___4={-6820637128800599871:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={524324:0}, id={524324:0}, int_urb={0:0}, INTERF_STATE=0, interface={-6820637128822836170:0}, interface={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-6820637128732966895:0}, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, product={-6820637128733491197:0}, ref_cnt=0, retval=4294967284, serial_number={-6820637128822834171:0}, SERIAL_STATE=0, tmp={2402734908121284613:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=88, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6491] udev->descriptor.idVendor [L6491] udev->descriptor.idProduct [L6493] CALL, EXPR ldv_usb_alloc_urb_45(0, 208U) [L8002] ldv_func_ret_type___11 ldv_func_res ; [L8003] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8005] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8514] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L4260] void *p ; [L4261] void *tmp ; [L4262] int tmp___0 ; [L4264] tmp___0 = __VERIFIER_nondet_int() [L4265] COND TRUE tmp___0 != 0 [L4266] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2147483648, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8514] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0=null, arg1=208, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8514] return ldv_malloc(sizeof(struct urb)); [L8005] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8005] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8006] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8007] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8186] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8007] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8008] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6493] RET, EXPR ldv_usb_alloc_urb_45(0, 208U) [L6493] command_out_urb = ldv_usb_alloc_urb_45(0, 208U) [L6494] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6495] retval = -12 [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); [L6764] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, command_out_urb={0:0}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={524324:0}, id={524324:0}, int_urb={0:0}, INTERF_STATE=0, interface={-6820637128822836170:0}, interface={-6820637128822836170:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, retval=4294967284, SERIAL_STATE=0, tmp={2402734908121284613:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7577] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7577] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7578] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=0, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7569] tmp___3 = __VERIFIER_nondet_int() [L7571] case 0: [L7634] case 1: [L7640] case 2: [L7686] case 3: [L7692] case 4: [L7698] case 5: [L7704] case 6: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=6, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7705] COND TRUE ldv_state_variable_0 != 0 [L7706] tmp___6 = __VERIFIER_nondet_int() [L7708] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7709] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7710] CALL vub300_exit() [L6922] CALL ldv_usb_deregister_61(& vub300_driver) [L8094] FCALL usb_deregister(arg) [L8095] ldv_state_variable_6 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg={-6820637128465055743:0}, arg={-6820637128465055743:0}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6922] RET ldv_usb_deregister_61(& vub300_driver) [L6923] CALL ldv_flush_workqueue_62(cmndworkqueue) [L8102] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={34359738368:-9223363240761614336}, ldv_func_arg1={34359738368:-9223363240761614336}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8103] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8103] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={34359738368:-9223363240761614336}, ldv_func_arg1={34359738368:-9223363240761614336}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6923] RET ldv_flush_workqueue_62(cmndworkqueue) [L6924] CALL ldv_flush_workqueue_63(pollworkqueue) [L8110] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={32896:-9223372036854775808}, ldv_func_arg1={32896:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8111] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8111] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={32896:-9223372036854775808}, ldv_func_arg1={32896:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6924] RET ldv_flush_workqueue_63(pollworkqueue) [L6925] CALL ldv_flush_workqueue_64(deadworkqueue) [L8118] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9221120237041089536:35184372088832}, ldv_func_arg1={-9221120237041089536:35184372088832}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8119] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8119] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9221120237041089536:35184372088832}, ldv_func_arg1={-9221120237041089536:35184372088832}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6925] RET ldv_flush_workqueue_64(deadworkqueue) [L6926] CALL ldv_destroy_workqueue_65(cmndworkqueue) [L8126] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={34359738368:-9223363240761614336}, ldv_func_arg1={34359738368:-9223363240761614336}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8127] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8127] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={34359738368:-9223363240761614336}, ldv_func_arg1={34359738368:-9223363240761614336}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6926] RET ldv_destroy_workqueue_65(cmndworkqueue) [L6927] CALL ldv_destroy_workqueue_66(pollworkqueue) [L8134] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={32896:-9223372036854775808}, ldv_func_arg1={32896:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8135] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8135] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={32896:-9223372036854775808}, ldv_func_arg1={32896:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6927] RET ldv_destroy_workqueue_66(pollworkqueue) [L6928] CALL ldv_destroy_workqueue_67(deadworkqueue) [L8142] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9221120237041089536:35184372088832}, ldv_func_arg1={-9221120237041089536:35184372088832}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8143] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7415] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7419] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7423] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7427] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_4)=null, \old(ldv_timer_list_4)=null, \old(ldv_timer_state_4)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8143] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9221120237041089536:35184372088832}, ldv_func_arg1={-9221120237041089536:35184372088832}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L6928] RET ldv_destroy_workqueue_67(deadworkqueue) [L7710] RET vub300_exit() [L7711] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-4611686018382515103:0}, ldvarg1={524324:0}, ldvarg2={-6820637128822836173:0}, ldvarg3={573:0}, ldvarg4={4503599628419103:0}, ldvarg5={-5764607523034234879:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, tmp={524324:0}, tmp___0={4503599628419103:0}, tmp___1={573:0}, tmp___2={-6820637128822836173:0}, tmp___3=6, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L7752] CALL ldv_check_final_state() [L8355] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8359] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8360] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] [L8151] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={34359738368:-9223363240761614336}, deadworkqueue={-9221120237041089536:35184372088832}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=0, ldv_state_variable_7=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={32896:-9223372036854775808}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-6820637128465055743:0}, vub300_driver_group1={-6820637128822836170:0}, vub300_mmc_ops={-6820637128733491199:0}, vub300_mmc_ops_group0={-6820637129001926655:0}, vub300_table={-6820637128822836106:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1582 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 112.7s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.4s, AutomataDifference: 34.1s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 4 mSolverCounterUnknown, 36399 SdHoareTripleChecker+Valid, 24.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 36152 mSDsluCounter, 189112 SdHoareTripleChecker+Invalid, 22.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 135631 mSDsCounter, 2194 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3475 IncrementalHoareTripleChecker+Invalid, 5673 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2194 mSolverCounterUnsat, 53481 mSDtfsCounter, 3475 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 4 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 7607 GetRequests, 7493 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 111 ImplicationChecksByTransitivity, 3.4s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=31811occurred in iteration=15, InterpolantAutomatonStates: 110, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 7.5s AutomataMinimizationTime, 20 MinimizatonAttempts, 18580 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 1.2s SsaConstructionTime, 20.6s SatisfiabilityAnalysisTime, 21.7s InterpolantComputationTime, 4117 NumberOfCodeBlocks, 3922 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 7572 ConstructedInterpolants, 0 QuantifiedInterpolants, 10137 SizeOfPredicates, 21 NumberOfNonLiveVariables, 22170 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 40 InterpolantComputations, 31 PerfectInterpolantSequences, 7080/7166 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 02:02:29,237 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample