./Ultimate.py --spec ../sv-benchmarks/c/properties/unreach-call.prp --file ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 0f8a17c6 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 02:07:04,365 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 02:07:04,366 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 02:07:04,425 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 02:07:04,426 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 02:07:04,429 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 02:07:04,431 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 02:07:04,436 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 02:07:04,437 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 02:07:04,441 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 02:07:04,442 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 02:07:04,443 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 02:07:04,443 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 02:07:04,446 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 02:07:04,447 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 02:07:04,449 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 02:07:04,450 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 02:07:04,450 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 02:07:04,454 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 02:07:04,459 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 02:07:04,460 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 02:07:04,461 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 02:07:04,463 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 02:07:04,463 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 02:07:04,469 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 02:07:04,469 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 02:07:04,470 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 02:07:04,471 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 02:07:04,471 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 02:07:04,472 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 02:07:04,472 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 02:07:04,473 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 02:07:04,475 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 02:07:04,475 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 02:07:04,476 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 02:07:04,477 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 02:07:04,477 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 02:07:04,477 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 02:07:04,478 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 02:07:04,478 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 02:07:04,479 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 02:07:04,480 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-17 02:07:04,513 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 02:07:04,513 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 02:07:04,514 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 02:07:04,514 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 02:07:04,515 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 02:07:04,515 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 02:07:04,515 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 02:07:04,515 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 02:07:04,516 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 02:07:04,516 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 02:07:04,517 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-17 02:07:04,517 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 02:07:04,517 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 02:07:04,517 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 02:07:04,517 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 02:07:04,518 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 02:07:04,518 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 02:07:04,518 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 02:07:04,518 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 02:07:04,518 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 02:07:04,519 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 02:07:04,519 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 02:07:04,519 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 02:07:04,519 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 02:07:04,519 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 02:07:04,520 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-17 02:07:04,520 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-17 02:07:04,521 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 02:07:04,521 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 02:07:04,521 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 02:07:04,521 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 02:07:04,522 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 [2021-11-17 02:07:04,757 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 02:07:04,781 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 02:07:04,784 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 02:07:04,785 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 02:07:04,786 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 02:07:04,787 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:07:04,852 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ae4eaa8a9/e8384b0303cf45a5babed0705ba84e44/FLAGe2202e4ff [2021-11-17 02:07:05,545 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 02:07:05,546 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:07:05,590 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ae4eaa8a9/e8384b0303cf45a5babed0705ba84e44/FLAGe2202e4ff [2021-11-17 02:07:05,873 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ae4eaa8a9/e8384b0303cf45a5babed0705ba84e44 [2021-11-17 02:07:05,876 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 02:07:05,877 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 02:07:05,878 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 02:07:05,879 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 02:07:05,889 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 02:07:05,889 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 02:07:05" (1/1) ... [2021-11-17 02:07:05,890 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@62d0caea and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:05, skipping insertion in model container [2021-11-17 02:07:05,890 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 02:07:05" (1/1) ... [2021-11-17 02:07:05,895 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 02:07:06,003 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 02:07:07,294 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-17 02:07:07,335 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 02:07:07,359 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 02:07:07,636 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-17 02:07:07,647 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 02:07:07,747 INFO L208 MainTranslator]: Completed translation [2021-11-17 02:07:07,749 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07 WrapperNode [2021-11-17 02:07:07,749 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 02:07:07,750 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 02:07:07,750 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 02:07:07,751 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 02:07:07,756 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:07,847 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,015 INFO L137 Inliner]: procedures = 260, calls = 1808, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4515 [2021-11-17 02:07:08,016 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 02:07:08,016 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 02:07:08,016 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 02:07:08,016 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 02:07:08,024 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,025 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,038 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,038 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,137 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,163 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,186 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,211 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 02:07:08,212 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 02:07:08,213 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 02:07:08,213 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 02:07:08,214 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (1/1) ... [2021-11-17 02:07:08,220 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 02:07:08,229 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:07:08,239 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 02:07:08,285 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 02:07:08,307 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-11-17 02:07:08,308 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-11-17 02:07:08,308 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 02:07:08,308 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 02:07:08,308 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 02:07:08,308 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 02:07:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-11-17 02:07:08,309 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-11-17 02:07:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-11-17 02:07:08,309 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-11-17 02:07:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-11-17 02:07:08,309 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-11-17 02:07:08,309 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-11-17 02:07:08,310 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-11-17 02:07:08,310 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-11-17 02:07:08,310 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-11-17 02:07:08,310 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-17 02:07:08,310 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-17 02:07:08,310 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-11-17 02:07:08,310 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-11-17 02:07:08,311 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 02:07:08,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 02:07:08,311 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-17 02:07:08,311 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-17 02:07:08,311 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-11-17 02:07:08,311 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-11-17 02:07:08,311 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-11-17 02:07:08,312 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-11-17 02:07:08,312 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-11-17 02:07:08,312 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-11-17 02:07:08,312 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 02:07:08,312 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 02:07:08,312 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 02:07:08,312 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 02:07:08,313 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-11-17 02:07:08,313 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-11-17 02:07:08,313 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 02:07:08,313 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 02:07:08,313 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-11-17 02:07:08,313 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-11-17 02:07:08,314 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-11-17 02:07:08,314 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-11-17 02:07:08,314 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-11-17 02:07:08,314 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-11-17 02:07:08,314 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-11-17 02:07:08,315 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-11-17 02:07:08,315 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-11-17 02:07:08,315 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-11-17 02:07:08,315 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-11-17 02:07:08,315 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-11-17 02:07:08,315 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-11-17 02:07:08,315 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-11-17 02:07:08,316 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 02:07:08,316 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-11-17 02:07:08,316 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-11-17 02:07:08,316 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-11-17 02:07:08,317 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-11-17 02:07:08,317 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-11-17 02:07:08,317 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-11-17 02:07:08,318 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 02:07:08,318 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-11-17 02:07:08,318 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-11-17 02:07:08,318 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-11-17 02:07:08,318 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-11-17 02:07:08,319 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-11-17 02:07:08,319 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-11-17 02:07:08,319 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-11-17 02:07:08,319 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-11-17 02:07:08,319 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-11-17 02:07:08,320 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-11-17 02:07:08,320 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-11-17 02:07:08,320 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-11-17 02:07:08,320 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 02:07:08,321 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 02:07:08,321 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-11-17 02:07:08,321 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-11-17 02:07:08,321 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-11-17 02:07:08,321 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-11-17 02:07:08,321 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-11-17 02:07:08,321 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-11-17 02:07:08,322 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-11-17 02:07:08,322 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-11-17 02:07:08,322 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-11-17 02:07:08,322 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-11-17 02:07:08,322 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-11-17 02:07:08,322 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-11-17 02:07:08,322 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-11-17 02:07:08,322 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-11-17 02:07:08,323 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-11-17 02:07:08,323 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-11-17 02:07:08,323 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-11-17 02:07:08,323 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-11-17 02:07:08,324 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-11-17 02:07:08,324 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-11-17 02:07:08,324 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-17 02:07:08,324 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-17 02:07:08,325 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-17 02:07:08,325 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-11-17 02:07:08,325 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-11-17 02:07:08,325 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-17 02:07:08,326 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-11-17 02:07:08,326 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-11-17 02:07:08,326 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-11-17 02:07:08,326 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-11-17 02:07:08,326 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-17 02:07:08,326 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-11-17 02:07:08,326 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-11-17 02:07:08,327 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 02:07:08,327 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 02:07:08,327 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 02:07:08,327 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 02:07:08,327 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 02:07:08,328 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 02:07:08,328 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-11-17 02:07:08,328 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-11-17 02:07:08,328 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 02:07:08,328 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 02:07:08,329 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 02:07:08,329 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 02:07:08,331 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-11-17 02:07:08,331 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-11-17 02:07:08,331 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-17 02:07:08,332 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-11-17 02:07:08,332 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-11-17 02:07:08,333 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-11-17 02:07:08,333 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-11-17 02:07:08,334 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-11-17 02:07:08,334 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-11-17 02:07:08,338 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 02:07:08,338 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 02:07:08,338 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-11-17 02:07:08,339 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-11-17 02:07:08,339 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-11-17 02:07:08,339 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-11-17 02:07:08,339 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 02:07:08,339 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-11-17 02:07:08,339 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-11-17 02:07:08,339 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-11-17 02:07:08,339 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-11-17 02:07:08,340 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-11-17 02:07:08,340 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-11-17 02:07:08,340 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-11-17 02:07:08,340 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-11-17 02:07:08,340 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-11-17 02:07:08,340 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-11-17 02:07:08,340 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 02:07:08,340 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-11-17 02:07:08,341 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-11-17 02:07:08,341 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-11-17 02:07:08,341 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-11-17 02:07:08,341 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-11-17 02:07:08,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-11-17 02:07:08,341 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-17 02:07:08,341 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-17 02:07:08,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 02:07:08,342 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-11-17 02:07:08,342 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-11-17 02:07:08,342 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 02:07:08,342 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 02:07:08,342 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-11-17 02:07:08,342 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-11-17 02:07:08,342 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-11-17 02:07:08,342 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-11-17 02:07:08,343 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-11-17 02:07:08,343 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-11-17 02:07:08,343 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-11-17 02:07:08,343 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-11-17 02:07:08,343 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-17 02:07:08,343 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-17 02:07:08,343 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-11-17 02:07:08,343 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-11-17 02:07:08,344 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-11-17 02:07:08,344 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-11-17 02:07:08,344 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-11-17 02:07:08,344 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-11-17 02:07:08,344 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-11-17 02:07:08,344 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-11-17 02:07:08,344 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-11-17 02:07:08,344 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-11-17 02:07:08,345 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-11-17 02:07:08,345 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-11-17 02:07:08,345 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-11-17 02:07:08,345 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-11-17 02:07:08,345 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-11-17 02:07:08,345 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-11-17 02:07:08,345 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-11-17 02:07:08,345 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-11-17 02:07:08,345 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-11-17 02:07:08,346 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-11-17 02:07:08,346 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-17 02:07:08,346 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-17 02:07:08,346 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-17 02:07:08,347 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-11-17 02:07:08,347 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-11-17 02:07:08,347 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-11-17 02:07:08,348 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-11-17 02:07:08,348 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-17 02:07:08,348 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-17 02:07:08,348 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-11-17 02:07:08,348 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-11-17 02:07:08,348 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-11-17 02:07:08,348 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-11-17 02:07:08,348 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-11-17 02:07:08,349 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 02:07:08,349 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 02:07:08,997 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 02:07:09,000 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 02:07:10,062 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 02:07:13,038 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 02:07:13,059 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 02:07:13,059 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-17 02:07:13,063 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:07:13 BoogieIcfgContainer [2021-11-17 02:07:13,063 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 02:07:13,065 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 02:07:13,065 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 02:07:13,067 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 02:07:13,067 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 02:07:05" (1/3) ... [2021-11-17 02:07:13,068 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a67ea7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 02:07:13, skipping insertion in model container [2021-11-17 02:07:13,068 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:07:07" (2/3) ... [2021-11-17 02:07:13,069 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@3a67ea7 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 02:07:13, skipping insertion in model container [2021-11-17 02:07:13,069 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:07:13" (3/3) ... [2021-11-17 02:07:13,071 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:07:13,076 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 02:07:13,076 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 02:07:13,132 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 02:07:13,138 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 02:07:13,139 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 02:07:13,199 INFO L276 IsEmpty]: Start isEmpty. Operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) [2021-11-17 02:07:13,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-17 02:07:13,219 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:07:13,220 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:07:13,220 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:07:13,225 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:07:13,225 INFO L85 PathProgramCache]: Analyzing trace with hash -1754157023, now seen corresponding path program 1 times [2021-11-17 02:07:13,232 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:07:13,233 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [437697843] [2021-11-17 02:07:13,233 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:07:13,234 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:07:13,423 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,595 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:07:13,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,622 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:13,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:13,635 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:07:13,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:13,664 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:13,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:07:13,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:13,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:13,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:07:13,769 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,788 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:13,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:13,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,820 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:07:13,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:13,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:07:13,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:13,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:13,875 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 02:07:13,875 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:07:13,876 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [437697843] [2021-11-17 02:07:13,876 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [437697843] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:07:13,876 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:07:13,877 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-17 02:07:13,878 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [154862605] [2021-11-17 02:07:13,878 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:07:13,882 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 02:07:13,882 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:07:13,901 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 02:07:13,902 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-17 02:07:13,907 INFO L87 Difference]: Start difference. First operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:18,408 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:07:18,409 INFO L93 Difference]: Finished difference Result 3330 states and 4958 transitions. [2021-11-17 02:07:18,410 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 02:07:18,411 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-11-17 02:07:18,411 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:07:18,439 INFO L225 Difference]: With dead ends: 3330 [2021-11-17 02:07:18,439 INFO L226 Difference]: Without dead ends: 1732 [2021-11-17 02:07:18,453 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-11-17 02:07:18,456 INFO L933 BasicCegarLoop]: 2109 mSDtfsCounter, 1689 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 958 mSolverCounterSat, 1528 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1721 SdHoareTripleChecker+Valid, 2938 SdHoareTripleChecker+Invalid, 2486 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1528 IncrementalHoareTripleChecker+Valid, 958 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:07:18,457 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1721 Valid, 2938 Invalid, 2486 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1528 Valid, 958 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2021-11-17 02:07:18,474 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1732 states. [2021-11-17 02:07:18,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1732 to 1570. [2021-11-17 02:07:18,590 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1570 states, 1102 states have (on average 1.3874773139745917) internal successors, (1529), 1157 states have internal predecessors, (1529), 375 states have call successors, (375), 93 states have call predecessors, (375), 92 states have return successors, (371), 345 states have call predecessors, (371), 371 states have call successors, (371) [2021-11-17 02:07:18,601 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1570 states to 1570 states and 2275 transitions. [2021-11-17 02:07:18,604 INFO L78 Accepts]: Start accepts. Automaton has 1570 states and 2275 transitions. Word has length 114 [2021-11-17 02:07:18,605 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:07:18,605 INFO L470 AbstractCegarLoop]: Abstraction has 1570 states and 2275 transitions. [2021-11-17 02:07:18,605 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:18,605 INFO L276 IsEmpty]: Start isEmpty. Operand 1570 states and 2275 transitions. [2021-11-17 02:07:18,613 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-17 02:07:18,613 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:07:18,614 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:07:18,614 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-17 02:07:18,615 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:07:18,615 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:07:18,615 INFO L85 PathProgramCache]: Analyzing trace with hash 340574761, now seen corresponding path program 1 times [2021-11-17 02:07:18,616 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:07:18,616 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1458187480] [2021-11-17 02:07:18,616 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:07:18,616 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:07:18,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:07:18,767 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:18,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:18,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:07:18,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:18,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:18,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:07:18,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,848 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:18,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:18,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:07:18,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:18,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:18,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:07:18,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,916 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:18,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:07:18,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:18,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:18,954 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 02:07:18,955 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:07:18,955 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1458187480] [2021-11-17 02:07:18,955 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1458187480] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:07:18,956 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:07:18,956 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 02:07:18,956 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [616713817] [2021-11-17 02:07:18,957 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:07:18,958 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 02:07:18,958 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:07:18,958 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 02:07:18,959 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 02:07:18,959 INFO L87 Difference]: Start difference. First operand 1570 states and 2275 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:28,430 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:07:28,430 INFO L93 Difference]: Finished difference Result 4978 states and 7479 transitions. [2021-11-17 02:07:28,430 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 02:07:28,430 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-11-17 02:07:28,431 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:07:28,454 INFO L225 Difference]: With dead ends: 4978 [2021-11-17 02:07:28,454 INFO L226 Difference]: Without dead ends: 3431 [2021-11-17 02:07:28,463 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-17 02:07:28,468 INFO L933 BasicCegarLoop]: 2630 mSDtfsCounter, 4041 mSDsluCounter, 3612 mSDsCounter, 0 mSdLazyCounter, 3062 mSolverCounterSat, 2191 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4259 SdHoareTripleChecker+Valid, 6242 SdHoareTripleChecker+Invalid, 5253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2191 IncrementalHoareTripleChecker+Valid, 3062 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:07:28,469 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4259 Valid, 6242 Invalid, 5253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2191 Valid, 3062 Invalid, 0 Unknown, 0 Unchecked, 9.2s Time] [2021-11-17 02:07:28,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3431 states. [2021-11-17 02:07:28,595 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3431 to 3138. [2021-11-17 02:07:28,601 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3138 states, 2203 states have (on average 1.3858374943259193) internal successors, (3053), 2313 states have internal predecessors, (3053), 742 states have call successors, (742), 184 states have call predecessors, (742), 192 states have return successors, (790), 694 states have call predecessors, (790), 738 states have call successors, (790) [2021-11-17 02:07:28,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3138 states to 3138 states and 4585 transitions. [2021-11-17 02:07:28,622 INFO L78 Accepts]: Start accepts. Automaton has 3138 states and 4585 transitions. Word has length 114 [2021-11-17 02:07:28,624 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:07:28,624 INFO L470 AbstractCegarLoop]: Abstraction has 3138 states and 4585 transitions. [2021-11-17 02:07:28,624 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:28,625 INFO L276 IsEmpty]: Start isEmpty. Operand 3138 states and 4585 transitions. [2021-11-17 02:07:28,633 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-11-17 02:07:28,633 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:07:28,633 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:07:28,633 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-17 02:07:28,635 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:07:28,635 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:07:28,635 INFO L85 PathProgramCache]: Analyzing trace with hash 1967333887, now seen corresponding path program 1 times [2021-11-17 02:07:28,635 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:07:28,636 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [764624297] [2021-11-17 02:07:28,636 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:07:28,636 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:07:28,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:07:28,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:28,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,808 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:28,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:07:28,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:28,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:28,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,838 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:07:28,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,847 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:28,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:28,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:07:28,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,867 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:28,868 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,909 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:28,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:07:28,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:28,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,944 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:07:28,947 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:28,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:28,962 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 02:07:28,963 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:07:28,963 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [764624297] [2021-11-17 02:07:28,963 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [764624297] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:07:28,963 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:07:28,963 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 02:07:28,964 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1869480319] [2021-11-17 02:07:28,964 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:07:28,965 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 02:07:28,965 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:07:28,966 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 02:07:28,966 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 02:07:28,966 INFO L87 Difference]: Start difference. First operand 3138 states and 4585 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:35,652 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:07:35,653 INFO L93 Difference]: Finished difference Result 9582 states and 14467 transitions. [2021-11-17 02:07:35,653 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 02:07:35,653 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 115 [2021-11-17 02:07:35,654 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:07:35,693 INFO L225 Difference]: With dead ends: 9582 [2021-11-17 02:07:35,693 INFO L226 Difference]: Without dead ends: 6467 [2021-11-17 02:07:35,711 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-17 02:07:35,712 INFO L933 BasicCegarLoop]: 2334 mSDtfsCounter, 4963 mSDsluCounter, 2589 mSDsCounter, 0 mSdLazyCounter, 1942 mSolverCounterSat, 3182 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5147 SdHoareTripleChecker+Valid, 4923 SdHoareTripleChecker+Invalid, 5124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3182 IncrementalHoareTripleChecker+Valid, 1942 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.4s IncrementalHoareTripleChecker+Time [2021-11-17 02:07:35,712 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5147 Valid, 4923 Invalid, 5124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3182 Valid, 1942 Invalid, 0 Unknown, 0 Unchecked, 6.4s Time] [2021-11-17 02:07:35,719 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6467 states. [2021-11-17 02:07:35,932 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6467 to 5881. [2021-11-17 02:07:35,943 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5881 states, 4130 states have (on average 1.3917675544794188) internal successors, (5748), 4345 states have internal predecessors, (5748), 1383 states have call successors, (1383), 350 states have call predecessors, (1383), 367 states have return successors, (1481), 1291 states have call predecessors, (1481), 1379 states have call successors, (1481) [2021-11-17 02:07:35,968 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5881 states to 5881 states and 8612 transitions. [2021-11-17 02:07:35,970 INFO L78 Accepts]: Start accepts. Automaton has 5881 states and 8612 transitions. Word has length 115 [2021-11-17 02:07:35,971 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:07:35,971 INFO L470 AbstractCegarLoop]: Abstraction has 5881 states and 8612 transitions. [2021-11-17 02:07:35,971 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:35,972 INFO L276 IsEmpty]: Start isEmpty. Operand 5881 states and 8612 transitions. [2021-11-17 02:07:35,974 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-17 02:07:35,975 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:07:35,975 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:07:35,975 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-17 02:07:35,975 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:07:35,976 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:07:35,976 INFO L85 PathProgramCache]: Analyzing trace with hash 857264108, now seen corresponding path program 1 times [2021-11-17 02:07:35,976 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:07:35,976 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2025629477] [2021-11-17 02:07:35,977 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:07:35,977 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:07:36,017 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,082 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:07:36,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:36,102 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,106 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:36,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,113 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:07:36,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:36,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:36,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:07:36,137 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:36,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:36,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:07:36,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,161 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:36,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:36,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:07:36,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:36,187 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,191 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:07:36,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:36,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:36,202 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 02:07:36,202 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:07:36,203 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2025629477] [2021-11-17 02:07:36,203 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2025629477] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:07:36,203 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:07:36,203 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 02:07:36,203 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [178141681] [2021-11-17 02:07:36,203 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:07:36,204 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 02:07:36,204 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:07:36,205 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 02:07:36,205 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 02:07:36,206 INFO L87 Difference]: Start difference. First operand 5881 states and 8612 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:40,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:07:40,550 INFO L93 Difference]: Finished difference Result 6462 states and 9660 transitions. [2021-11-17 02:07:40,551 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 02:07:40,551 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 116 [2021-11-17 02:07:40,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:07:40,591 INFO L225 Difference]: With dead ends: 6462 [2021-11-17 02:07:40,591 INFO L226 Difference]: Without dead ends: 6459 [2021-11-17 02:07:40,597 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:07:40,601 INFO L933 BasicCegarLoop]: 2038 mSDtfsCounter, 3618 mSDsluCounter, 816 mSDsCounter, 0 mSdLazyCounter, 990 mSolverCounterSat, 1846 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 3.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3836 SdHoareTripleChecker+Valid, 2854 SdHoareTripleChecker+Invalid, 2836 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1846 IncrementalHoareTripleChecker+Valid, 990 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:07:40,602 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3836 Valid, 2854 Invalid, 2836 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1846 Valid, 990 Invalid, 0 Unknown, 0 Unchecked, 4.2s Time] [2021-11-17 02:07:40,610 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6459 states. [2021-11-17 02:07:40,853 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6459 to 5880. [2021-11-17 02:07:40,877 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5880 states, 4130 states have (on average 1.3915254237288135) internal successors, (5747), 4344 states have internal predecessors, (5747), 1382 states have call successors, (1382), 350 states have call predecessors, (1382), 367 states have return successors, (1481), 1291 states have call predecessors, (1481), 1379 states have call successors, (1481) [2021-11-17 02:07:40,904 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5880 states to 5880 states and 8610 transitions. [2021-11-17 02:07:40,905 INFO L78 Accepts]: Start accepts. Automaton has 5880 states and 8610 transitions. Word has length 116 [2021-11-17 02:07:40,905 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:07:40,906 INFO L470 AbstractCegarLoop]: Abstraction has 5880 states and 8610 transitions. [2021-11-17 02:07:40,906 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:40,907 INFO L276 IsEmpty]: Start isEmpty. Operand 5880 states and 8610 transitions. [2021-11-17 02:07:40,909 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-17 02:07:40,909 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:07:40,909 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:07:40,909 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-17 02:07:40,910 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:07:40,910 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:07:40,910 INFO L85 PathProgramCache]: Analyzing trace with hash 804844194, now seen corresponding path program 1 times [2021-11-17 02:07:40,910 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:07:40,911 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [378511421] [2021-11-17 02:07:40,911 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:07:40,911 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:07:40,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,007 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:07:41,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:41,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,026 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:41,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:07:41,034 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:41,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:41,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,059 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:07:41,063 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,070 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:41,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,076 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:41,076 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:07:41,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:41,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:41,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,108 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:07:41,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:41,117 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:07:41,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:41,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:41,135 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-17 02:07:41,135 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:07:41,135 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [378511421] [2021-11-17 02:07:41,136 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [378511421] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:07:41,136 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:07:41,136 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-17 02:07:41,136 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [187863916] [2021-11-17 02:07:41,136 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:07:41,137 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 02:07:41,137 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:07:41,137 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 02:07:41,137 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-17 02:07:41,137 INFO L87 Difference]: Start difference. First operand 5880 states and 8610 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:46,823 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:07:46,824 INFO L93 Difference]: Finished difference Result 6461 states and 9658 transitions. [2021-11-17 02:07:46,824 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-17 02:07:46,824 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 117 [2021-11-17 02:07:46,825 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:07:46,870 INFO L225 Difference]: With dead ends: 6461 [2021-11-17 02:07:46,871 INFO L226 Difference]: Without dead ends: 6429 [2021-11-17 02:07:46,877 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:07:46,878 INFO L933 BasicCegarLoop]: 2038 mSDtfsCounter, 3105 mSDsluCounter, 1490 mSDsCounter, 0 mSdLazyCounter, 1676 mSolverCounterSat, 1362 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3323 SdHoareTripleChecker+Valid, 3528 SdHoareTripleChecker+Invalid, 3038 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1362 IncrementalHoareTripleChecker+Valid, 1676 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 5.5s IncrementalHoareTripleChecker+Time [2021-11-17 02:07:46,879 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3323 Valid, 3528 Invalid, 3038 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1362 Valid, 1676 Invalid, 0 Unknown, 0 Unchecked, 5.5s Time] [2021-11-17 02:07:46,885 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6429 states. [2021-11-17 02:07:47,091 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6429 to 5850. [2021-11-17 02:07:47,100 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5850 states, 4114 states have (on average 1.3920758385999028) internal successors, (5727), 4327 states have internal predecessors, (5727), 1369 states have call successors, (1369), 349 states have call predecessors, (1369), 366 states have return successors, (1469), 1279 states have call predecessors, (1469), 1367 states have call successors, (1469) [2021-11-17 02:07:47,122 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5850 states to 5850 states and 8565 transitions. [2021-11-17 02:07:47,124 INFO L78 Accepts]: Start accepts. Automaton has 5850 states and 8565 transitions. Word has length 117 [2021-11-17 02:07:47,124 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:07:47,124 INFO L470 AbstractCegarLoop]: Abstraction has 5850 states and 8565 transitions. [2021-11-17 02:07:47,125 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-17 02:07:47,125 INFO L276 IsEmpty]: Start isEmpty. Operand 5850 states and 8565 transitions. [2021-11-17 02:07:47,132 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2021-11-17 02:07:47,132 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:07:47,133 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:07:47,133 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-17 02:07:47,133 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:07:47,133 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:07:47,133 INFO L85 PathProgramCache]: Analyzing trace with hash 604265189, now seen corresponding path program 1 times [2021-11-17 02:07:47,134 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:07:47,136 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [735644973] [2021-11-17 02:07:47,136 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:07:47,137 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:07:47,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:07:47,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:47,249 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:47,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:07:47,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:47,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:47,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,275 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:07:47,276 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:47,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:47,285 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:07:47,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:47,297 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:47,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,311 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:07:47,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,320 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:47,321 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:07:47,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,332 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:47,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2021-11-17 02:07:47,345 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,350 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-11-17 02:07:47,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-11-17 02:07:47,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2021-11-17 02:07:47,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,365 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2021-11-17 02:07:47,370 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,376 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:47,376 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-11-17 02:07:47,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:47,391 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-11-17 02:07:47,393 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:07:47,393 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [735644973] [2021-11-17 02:07:47,393 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [735644973] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:07:47,393 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:07:47,393 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 02:07:47,393 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2024446371] [2021-11-17 02:07:47,394 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:07:47,394 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 02:07:47,394 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:07:47,394 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 02:07:47,395 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:07:47,395 INFO L87 Difference]: Start difference. First operand 5850 states and 8565 transitions. Second operand has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-17 02:07:58,709 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:07:58,709 INFO L93 Difference]: Finished difference Result 20074 states and 30434 transitions. [2021-11-17 02:07:58,709 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 02:07:58,709 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 169 [2021-11-17 02:07:58,710 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:07:58,774 INFO L225 Difference]: With dead ends: 20074 [2021-11-17 02:07:58,774 INFO L226 Difference]: Without dead ends: 14247 [2021-11-17 02:07:58,802 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-11-17 02:07:58,804 INFO L933 BasicCegarLoop]: 2264 mSDtfsCounter, 6463 mSDsluCounter, 4871 mSDsCounter, 0 mSdLazyCounter, 5940 mSolverCounterSat, 5087 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6792 SdHoareTripleChecker+Valid, 7135 SdHoareTripleChecker+Invalid, 11027 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 5087 IncrementalHoareTripleChecker+Valid, 5940 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.7s IncrementalHoareTripleChecker+Time [2021-11-17 02:07:58,804 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6792 Valid, 7135 Invalid, 11027 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [5087 Valid, 5940 Invalid, 0 Unknown, 0 Unchecked, 10.7s Time] [2021-11-17 02:07:58,818 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14247 states. [2021-11-17 02:07:59,270 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14247 to 12562. [2021-11-17 02:07:59,290 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12562 states, 8738 states have (on average 1.384641794460975) internal successors, (12099), 9249 states have internal predecessors, (12099), 2943 states have call successors, (2943), 677 states have call predecessors, (2943), 880 states have return successors, (3810), 2917 states have call predecessors, (3810), 2941 states have call successors, (3810) [2021-11-17 02:07:59,342 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12562 states to 12562 states and 18852 transitions. [2021-11-17 02:07:59,345 INFO L78 Accepts]: Start accepts. Automaton has 12562 states and 18852 transitions. Word has length 169 [2021-11-17 02:07:59,345 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:07:59,345 INFO L470 AbstractCegarLoop]: Abstraction has 12562 states and 18852 transitions. [2021-11-17 02:07:59,346 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-17 02:07:59,346 INFO L276 IsEmpty]: Start isEmpty. Operand 12562 states and 18852 transitions. [2021-11-17 02:07:59,365 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2021-11-17 02:07:59,365 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:07:59,365 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:07:59,366 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-17 02:07:59,366 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:07:59,366 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:07:59,366 INFO L85 PathProgramCache]: Analyzing trace with hash -563103977, now seen corresponding path program 1 times [2021-11-17 02:07:59,367 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:07:59,367 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1819652375] [2021-11-17 02:07:59,367 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:07:59,443 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:07:59,492 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:07:59,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,598 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,599 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,602 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:59,603 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,606 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:07:59,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,616 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:59,617 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,623 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:07:59,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:59,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,637 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:07:59,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,643 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:59,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:07:59,661 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,665 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,666 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:07:59,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-17 02:07:59,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:07:59,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2021-11-17 02:07:59,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-11-17 02:07:59,718 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,723 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-11-17 02:07:59,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-11-17 02:07:59,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-11-17 02:07:59,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,744 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:07:59,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-11-17 02:07:59,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:07:59,763 INFO L134 CoverageAnalysis]: Checked inductivity of 187 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 167 trivial. 0 not checked. [2021-11-17 02:07:59,763 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:07:59,763 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1819652375] [2021-11-17 02:07:59,763 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1819652375] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:07:59,764 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:07:59,764 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-17 02:07:59,764 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [691066473] [2021-11-17 02:07:59,764 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:07:59,765 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-17 02:07:59,765 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:07:59,765 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-17 02:07:59,765 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-17 02:07:59,766 INFO L87 Difference]: Start difference. First operand 12562 states and 18852 transitions. Second operand has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-17 02:08:09,676 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:08:09,676 INFO L93 Difference]: Finished difference Result 29123 states and 44848 transitions. [2021-11-17 02:08:09,677 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 02:08:09,678 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 208 [2021-11-17 02:08:09,678 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:08:09,759 INFO L225 Difference]: With dead ends: 29123 [2021-11-17 02:08:09,759 INFO L226 Difference]: Without dead ends: 16584 [2021-11-17 02:08:09,813 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=81, Invalid=225, Unknown=0, NotChecked=0, Total=306 [2021-11-17 02:08:09,814 INFO L933 BasicCegarLoop]: 2348 mSDtfsCounter, 5712 mSDsluCounter, 5559 mSDsCounter, 0 mSdLazyCounter, 4803 mSolverCounterSat, 4412 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5978 SdHoareTripleChecker+Valid, 7907 SdHoareTripleChecker+Invalid, 9215 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4412 IncrementalHoareTripleChecker+Valid, 4803 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:08:09,815 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5978 Valid, 7907 Invalid, 9215 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4412 Valid, 4803 Invalid, 0 Unknown, 0 Unchecked, 9.2s Time] [2021-11-17 02:08:09,831 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16584 states. [2021-11-17 02:08:10,407 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16584 to 12576. [2021-11-17 02:08:10,425 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12576 states, 8752 states have (on average 1.384026508226691) internal successors, (12113), 9263 states have internal predecessors, (12113), 2943 states have call successors, (2943), 677 states have call predecessors, (2943), 880 states have return successors, (3810), 2917 states have call predecessors, (3810), 2941 states have call successors, (3810) [2021-11-17 02:08:10,480 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12576 states to 12576 states and 18866 transitions. [2021-11-17 02:08:10,486 INFO L78 Accepts]: Start accepts. Automaton has 12576 states and 18866 transitions. Word has length 208 [2021-11-17 02:08:10,486 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:08:10,486 INFO L470 AbstractCegarLoop]: Abstraction has 12576 states and 18866 transitions. [2021-11-17 02:08:10,487 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-17 02:08:10,487 INFO L276 IsEmpty]: Start isEmpty. Operand 12576 states and 18866 transitions. [2021-11-17 02:08:10,505 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 226 [2021-11-17 02:08:10,505 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:08:10,505 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:08:10,506 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-17 02:08:10,506 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:08:10,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:08:10,506 INFO L85 PathProgramCache]: Analyzing trace with hash -37150978, now seen corresponding path program 1 times [2021-11-17 02:08:10,506 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:08:10,507 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1702361885] [2021-11-17 02:08:10,507 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:08:10,507 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:08:10,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,647 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:08:10,649 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,657 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,660 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:10,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,666 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:08:10,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,671 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:10,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:08:10,679 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,683 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,687 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:10,687 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:08:10,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:10,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:08:10,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:08:10,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-17 02:08:10,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:10,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-11-17 02:08:10,745 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,750 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:10,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-11-17 02:08:10,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,769 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-17 02:08:10,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-11-17 02:08:10,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,778 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-17 02:08:10,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-17 02:08:10,788 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:10,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-17 02:08:10,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:10,806 INFO L134 CoverageAnalysis]: Checked inductivity of 257 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 236 trivial. 0 not checked. [2021-11-17 02:08:10,806 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:08:10,807 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1702361885] [2021-11-17 02:08:10,807 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1702361885] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:08:10,807 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:08:10,807 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-17 02:08:10,807 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [82556075] [2021-11-17 02:08:10,807 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:08:10,808 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 02:08:10,808 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:08:10,808 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 02:08:10,808 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:08:10,809 INFO L87 Difference]: Start difference. First operand 12576 states and 18866 transitions. Second operand has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:08:25,319 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:08:25,319 INFO L93 Difference]: Finished difference Result 40481 states and 61702 transitions. [2021-11-17 02:08:25,319 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 02:08:25,320 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 225 [2021-11-17 02:08:25,320 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:08:25,460 INFO L225 Difference]: With dead ends: 40481 [2021-11-17 02:08:25,461 INFO L226 Difference]: Without dead ends: 27928 [2021-11-17 02:08:25,510 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-11-17 02:08:25,511 INFO L933 BasicCegarLoop]: 3448 mSDtfsCounter, 5439 mSDsluCounter, 6079 mSDsCounter, 0 mSdLazyCounter, 6702 mSolverCounterSat, 5211 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 12.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5797 SdHoareTripleChecker+Valid, 9527 SdHoareTripleChecker+Invalid, 11913 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5211 IncrementalHoareTripleChecker+Valid, 6702 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 13.6s IncrementalHoareTripleChecker+Time [2021-11-17 02:08:25,511 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5797 Valid, 9527 Invalid, 11913 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5211 Valid, 6702 Invalid, 0 Unknown, 0 Unchecked, 13.6s Time] [2021-11-17 02:08:25,533 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27928 states. [2021-11-17 02:08:26,729 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27928 to 24675. [2021-11-17 02:08:26,762 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24675 states, 17196 states have (on average 1.3851477087694812) internal successors, (23819), 18197 states have internal predecessors, (23819), 5743 states have call successors, (5743), 1328 states have call predecessors, (5743), 1735 states have return successors, (7471), 5693 states have call predecessors, (7471), 5741 states have call successors, (7471) [2021-11-17 02:08:26,870 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24675 states to 24675 states and 37033 transitions. [2021-11-17 02:08:26,877 INFO L78 Accepts]: Start accepts. Automaton has 24675 states and 37033 transitions. Word has length 225 [2021-11-17 02:08:26,878 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:08:26,878 INFO L470 AbstractCegarLoop]: Abstraction has 24675 states and 37033 transitions. [2021-11-17 02:08:26,878 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:08:26,878 INFO L276 IsEmpty]: Start isEmpty. Operand 24675 states and 37033 transitions. [2021-11-17 02:08:26,921 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 252 [2021-11-17 02:08:26,922 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:08:26,922 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:08:26,922 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-17 02:08:26,923 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:08:26,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:08:26,923 INFO L85 PathProgramCache]: Analyzing trace with hash -67567646, now seen corresponding path program 1 times [2021-11-17 02:08:26,923 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:08:26,923 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1526071587] [2021-11-17 02:08:26,924 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:08:26,924 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:08:26,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:08:27,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,055 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:27,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,073 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:08:27,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,081 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,081 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,084 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:27,085 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:08:27,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,096 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:27,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,100 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:08:27,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:27,109 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:08:27,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,127 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:08:27,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,139 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-17 02:08:27,144 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,152 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:27,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,155 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-11-17 02:08:27,157 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,185 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-11-17 02:08:27,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2021-11-17 02:08:27,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-11-17 02:08:27,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-11-17 02:08:27,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,213 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-11-17 02:08:27,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-17 02:08:27,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,234 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-17 02:08:27,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,239 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 197 [2021-11-17 02:08:27,240 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-11-17 02:08:27,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,249 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2021-11-17 02:08:27,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,254 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:27,255 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,264 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2021-11-17 02:08:27,266 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:27,270 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 196 trivial. 0 not checked. [2021-11-17 02:08:27,270 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:08:27,270 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1526071587] [2021-11-17 02:08:27,270 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1526071587] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:08:27,270 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:08:27,270 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-11-17 02:08:27,271 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1900230382] [2021-11-17 02:08:27,271 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:08:27,272 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-17 02:08:27,272 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:08:27,272 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-17 02:08:27,272 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2021-11-17 02:08:27,273 INFO L87 Difference]: Start difference. First operand 24675 states and 37033 transitions. Second operand has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-11-17 02:08:40,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:08:40,476 INFO L93 Difference]: Finished difference Result 42234 states and 63906 transitions. [2021-11-17 02:08:40,476 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-11-17 02:08:40,476 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 251 [2021-11-17 02:08:40,477 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:08:40,568 INFO L225 Difference]: With dead ends: 42234 [2021-11-17 02:08:40,568 INFO L226 Difference]: Without dead ends: 17371 [2021-11-17 02:08:40,650 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=78, Invalid=228, Unknown=0, NotChecked=0, Total=306 [2021-11-17 02:08:40,653 INFO L933 BasicCegarLoop]: 1985 mSDtfsCounter, 2410 mSDsluCounter, 7593 mSDsCounter, 0 mSdLazyCounter, 7528 mSolverCounterSat, 2213 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2554 SdHoareTripleChecker+Valid, 9578 SdHoareTripleChecker+Invalid, 9741 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2213 IncrementalHoareTripleChecker+Valid, 7528 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.3s IncrementalHoareTripleChecker+Time [2021-11-17 02:08:40,653 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2554 Valid, 9578 Invalid, 9741 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2213 Valid, 7528 Invalid, 0 Unknown, 0 Unchecked, 12.3s Time] [2021-11-17 02:08:40,671 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17371 states. [2021-11-17 02:08:41,437 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17371 to 15289. [2021-11-17 02:08:41,455 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15289 states, 10641 states have (on average 1.3824828493562635) internal successors, (14711), 11263 states have internal predecessors, (14711), 3559 states have call successors, (3559), 834 states have call predecessors, (3559), 1088 states have return successors, (4632), 3525 states have call predecessors, (4632), 3557 states have call successors, (4632) [2021-11-17 02:08:41,521 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15289 states to 15289 states and 22902 transitions. [2021-11-17 02:08:41,529 INFO L78 Accepts]: Start accepts. Automaton has 15289 states and 22902 transitions. Word has length 251 [2021-11-17 02:08:41,529 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:08:41,529 INFO L470 AbstractCegarLoop]: Abstraction has 15289 states and 22902 transitions. [2021-11-17 02:08:41,530 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-11-17 02:08:41,530 INFO L276 IsEmpty]: Start isEmpty. Operand 15289 states and 22902 transitions. [2021-11-17 02:08:41,578 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 285 [2021-11-17 02:08:41,578 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:08:41,578 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:08:41,579 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-17 02:08:41,579 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:08:41,579 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:08:41,579 INFO L85 PathProgramCache]: Analyzing trace with hash 1511917438, now seen corresponding path program 1 times [2021-11-17 02:08:41,580 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:08:41,580 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [652615842] [2021-11-17 02:08:41,580 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:08:41,580 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:08:41,626 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,710 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:08:41,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:41,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:41,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:08:41,728 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:41,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,735 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:41,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:08:41,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:41,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:41,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,752 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:08:41,753 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,757 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:41,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:41,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:08:41,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,776 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:41,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:08:41,780 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,784 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:41,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:41,823 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-11-17 02:08:41,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:08:42,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,099 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:42,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:08:42,103 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,107 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 02:08:42,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,114 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:08:42,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 02:08:42,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:42,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 02:08:42,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,137 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:08:42,138 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:08:42,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:42,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:42,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,171 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:08:42,171 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 02:08:42,175 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,177 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 02:08:42,178 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,181 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 02:08:42,181 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,184 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 02:08:42,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 02:08:42,202 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:42,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:42,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:42,220 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:08:42,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,226 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 02:08:42,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 02:08:42,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:42,233 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 02:08:42,234 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:08:42,234 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [652615842] [2021-11-17 02:08:42,234 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [652615842] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:08:42,234 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:08:42,234 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 02:08:42,234 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [688168025] [2021-11-17 02:08:42,234 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:08:42,235 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 02:08:42,235 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:08:42,236 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 02:08:42,236 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 02:08:42,236 INFO L87 Difference]: Start difference. First operand 15289 states and 22902 transitions. Second operand has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:08:55,459 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:08:55,460 INFO L93 Difference]: Finished difference Result 32633 states and 49455 transitions. [2021-11-17 02:08:55,462 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 02:08:55,462 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 284 [2021-11-17 02:08:55,462 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:08:55,550 INFO L225 Difference]: With dead ends: 32633 [2021-11-17 02:08:55,551 INFO L226 Difference]: Without dead ends: 17377 [2021-11-17 02:08:55,611 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 02:08:55,612 INFO L933 BasicCegarLoop]: 1876 mSDtfsCounter, 3938 mSDsluCounter, 3901 mSDsCounter, 0 mSdLazyCounter, 6038 mSolverCounterSat, 2460 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 11.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4220 SdHoareTripleChecker+Valid, 5777 SdHoareTripleChecker+Invalid, 8498 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2460 IncrementalHoareTripleChecker+Valid, 6038 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 12.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:08:55,613 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4220 Valid, 5777 Invalid, 8498 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2460 Valid, 6038 Invalid, 0 Unknown, 0 Unchecked, 12.2s Time] [2021-11-17 02:08:55,626 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17377 states. [2021-11-17 02:08:56,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17377 to 15269. [2021-11-17 02:08:56,377 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15269 states, 10631 states have (on average 1.3819019847615464) internal successors, (14691), 11253 states have internal predecessors, (14691), 3549 states have call successors, (3549), 834 states have call predecessors, (3549), 1088 states have return successors, (4602), 3515 states have call predecessors, (4602), 3547 states have call successors, (4602) [2021-11-17 02:08:56,442 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15269 states to 15269 states and 22842 transitions. [2021-11-17 02:08:56,447 INFO L78 Accepts]: Start accepts. Automaton has 15269 states and 22842 transitions. Word has length 284 [2021-11-17 02:08:56,447 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:08:56,447 INFO L470 AbstractCegarLoop]: Abstraction has 15269 states and 22842 transitions. [2021-11-17 02:08:56,448 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:08:56,448 INFO L276 IsEmpty]: Start isEmpty. Operand 15269 states and 22842 transitions. [2021-11-17 02:08:56,478 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 282 [2021-11-17 02:08:56,478 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:08:56,479 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:08:56,479 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-17 02:08:56,479 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:08:56,479 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:08:56,480 INFO L85 PathProgramCache]: Analyzing trace with hash 214519940, now seen corresponding path program 1 times [2021-11-17 02:08:56,480 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:08:56,480 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1489823196] [2021-11-17 02:08:56,480 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:08:56,480 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:08:56,524 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,604 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:08:56,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,619 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:56,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,628 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:08:56,629 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,633 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,636 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:56,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:08:56,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:56,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,651 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:08:56,652 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:56,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:08:56,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,689 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:08:56,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-11-17 02:08:56,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:08:56,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,790 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:56,791 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:08:56,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 02:08:56,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:08:56,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 02:08:56,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 02:08:56,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:08:56,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:08:56,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,855 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:08:56,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 02:08:56,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,879 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 02:08:56,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 02:08:56,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 02:08:56,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 02:08:56,905 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:08:56,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:08:56,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:08:56,925 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 02:08:56,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 02:08:56,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:08:56,936 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 02:08:56,936 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:08:56,937 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1489823196] [2021-11-17 02:08:56,937 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1489823196] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:08:56,937 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:08:56,937 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 02:08:56,937 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [117495534] [2021-11-17 02:08:56,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:08:56,938 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 02:08:56,939 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:08:56,939 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 02:08:56,939 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 02:08:56,940 INFO L87 Difference]: Start difference. First operand 15269 states and 22842 transitions. Second operand has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:09:07,591 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:09:07,591 INFO L93 Difference]: Finished difference Result 32593 states and 49330 transitions. [2021-11-17 02:09:07,592 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 02:09:07,592 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 281 [2021-11-17 02:09:07,592 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:09:07,662 INFO L225 Difference]: With dead ends: 32593 [2021-11-17 02:09:07,662 INFO L226 Difference]: Without dead ends: 17357 [2021-11-17 02:09:07,700 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 02:09:07,701 INFO L933 BasicCegarLoop]: 1864 mSDtfsCounter, 6050 mSDsluCounter, 3357 mSDsCounter, 0 mSdLazyCounter, 4846 mSolverCounterSat, 4762 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6324 SdHoareTripleChecker+Valid, 5221 SdHoareTripleChecker+Invalid, 9608 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4762 IncrementalHoareTripleChecker+Valid, 4846 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.8s IncrementalHoareTripleChecker+Time [2021-11-17 02:09:07,701 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6324 Valid, 5221 Invalid, 9608 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4762 Valid, 4846 Invalid, 0 Unknown, 0 Unchecked, 9.8s Time] [2021-11-17 02:09:07,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17357 states. [2021-11-17 02:09:08,411 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17357 to 15249. [2021-11-17 02:09:08,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15249 states, 10621 states have (on average 1.381320026362866) internal successors, (14671), 11243 states have internal predecessors, (14671), 3539 states have call successors, (3539), 834 states have call predecessors, (3539), 1088 states have return successors, (4572), 3505 states have call predecessors, (4572), 3537 states have call successors, (4572) [2021-11-17 02:09:08,471 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15249 states to 15249 states and 22782 transitions. [2021-11-17 02:09:08,476 INFO L78 Accepts]: Start accepts. Automaton has 15249 states and 22782 transitions. Word has length 281 [2021-11-17 02:09:08,476 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:09:08,476 INFO L470 AbstractCegarLoop]: Abstraction has 15249 states and 22782 transitions. [2021-11-17 02:09:08,476 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:09:08,477 INFO L276 IsEmpty]: Start isEmpty. Operand 15249 states and 22782 transitions. [2021-11-17 02:09:08,506 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 283 [2021-11-17 02:09:08,506 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:09:08,507 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:09:08,507 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-17 02:09:08,507 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:09:08,507 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:09:08,508 INFO L85 PathProgramCache]: Analyzing trace with hash -2007024995, now seen corresponding path program 1 times [2021-11-17 02:09:08,508 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:09:08,508 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1558900446] [2021-11-17 02:09:08,508 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:08,508 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:09:08,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,630 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:09:08,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,644 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:08,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:09:08,651 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,655 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,655 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,658 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:08,658 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:09:08,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,669 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:08,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:09:08,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,684 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:08,684 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,695 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:09:08,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,701 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,704 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:09:08,705 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-17 02:09:08,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:09:08,782 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,795 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:08,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:09:08,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 02:09:08,805 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:09:08,811 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 02:09:08,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,826 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 02:09:08,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:09:08,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:09:08,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,854 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:09:08,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 02:09:08,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 02:09:08,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,872 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 02:09:08,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,875 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 02:09:08,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 02:09:08,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,903 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:08,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:08,906 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:09:08,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,912 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 02:09:08,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 02:09:08,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:08,919 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 02:09:08,919 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:09:08,919 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1558900446] [2021-11-17 02:09:08,919 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1558900446] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:09:08,919 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:09:08,920 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 02:09:08,920 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [176574051] [2021-11-17 02:09:08,920 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:09:08,921 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 02:09:08,921 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:09:08,922 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 02:09:08,922 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 02:09:08,923 INFO L87 Difference]: Start difference. First operand 15249 states and 22782 transitions. Second operand has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:09:19,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:09:19,278 INFO L93 Difference]: Finished difference Result 32553 states and 49205 transitions. [2021-11-17 02:09:19,279 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 02:09:19,279 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 282 [2021-11-17 02:09:19,279 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:09:19,335 INFO L225 Difference]: With dead ends: 32553 [2021-11-17 02:09:19,335 INFO L226 Difference]: Without dead ends: 17337 [2021-11-17 02:09:19,368 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 02:09:19,369 INFO L933 BasicCegarLoop]: 1872 mSDtfsCounter, 4929 mSDsluCounter, 3360 mSDsCounter, 0 mSdLazyCounter, 4978 mSolverCounterSat, 3184 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 8.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5199 SdHoareTripleChecker+Valid, 5232 SdHoareTripleChecker+Invalid, 8162 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3184 IncrementalHoareTripleChecker+Valid, 4978 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 9.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:09:19,369 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5199 Valid, 5232 Invalid, 8162 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3184 Valid, 4978 Invalid, 0 Unknown, 0 Unchecked, 9.2s Time] [2021-11-17 02:09:19,383 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17337 states. [2021-11-17 02:09:20,113 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17337 to 15229. [2021-11-17 02:09:20,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15229 states, 10611 states have (on average 1.38073697106776) internal successors, (14651), 11233 states have internal predecessors, (14651), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1088 states have return successors, (4542), 3495 states have call predecessors, (4542), 3527 states have call successors, (4542) [2021-11-17 02:09:20,170 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15229 states to 15229 states and 22722 transitions. [2021-11-17 02:09:20,176 INFO L78 Accepts]: Start accepts. Automaton has 15229 states and 22722 transitions. Word has length 282 [2021-11-17 02:09:20,176 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:09:20,176 INFO L470 AbstractCegarLoop]: Abstraction has 15229 states and 22722 transitions. [2021-11-17 02:09:20,177 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:09:20,177 INFO L276 IsEmpty]: Start isEmpty. Operand 15229 states and 22722 transitions. [2021-11-17 02:09:20,205 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 284 [2021-11-17 02:09:20,206 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:09:20,206 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:09:20,206 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-11-17 02:09:20,207 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:09:20,207 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:09:20,207 INFO L85 PathProgramCache]: Analyzing trace with hash 1218724741, now seen corresponding path program 1 times [2021-11-17 02:09:20,207 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:09:20,207 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1556824408] [2021-11-17 02:09:20,208 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:20,208 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:09:20,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:09:20,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,347 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:20,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:09:20,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,360 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,360 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,363 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:20,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:09:20,368 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,371 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,372 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:20,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:09:20,379 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,383 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:20,386 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,397 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:09:20,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,407 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:09:20,409 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,412 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,449 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-17 02:09:20,470 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,493 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:09:20,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:20,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:09:20,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,519 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-17 02:09:20,521 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:09:20,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,528 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-17 02:09:20,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,543 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-17 02:09:20,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,547 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:09:20,548 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,551 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:09:20,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-17 02:09:20,586 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,590 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-17 02:09:20,590 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,593 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-17 02:09:20,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-17 02:09:20,597 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 02:09:20,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-17 02:09:20,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,632 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:20,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,635 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:20,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-17 02:09:20,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,642 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-17 02:09:20,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-17 02:09:20,645 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:20,648 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-17 02:09:20,649 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:09:20,649 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1556824408] [2021-11-17 02:09:20,649 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1556824408] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:09:20,649 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:09:20,649 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-17 02:09:20,649 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2095839036] [2021-11-17 02:09:20,650 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:09:20,651 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 02:09:20,651 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:09:20,651 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 02:09:20,651 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-17 02:09:20,651 INFO L87 Difference]: Start difference. First operand 15229 states and 22722 transitions. Second operand has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:09:31,610 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:09:31,611 INFO L93 Difference]: Finished difference Result 32513 states and 49080 transitions. [2021-11-17 02:09:31,614 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-17 02:09:31,614 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 283 [2021-11-17 02:09:31,614 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:09:31,696 INFO L225 Difference]: With dead ends: 32513 [2021-11-17 02:09:31,696 INFO L226 Difference]: Without dead ends: 17317 [2021-11-17 02:09:31,734 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-17 02:09:31,735 INFO L933 BasicCegarLoop]: 1913 mSDtfsCounter, 5331 mSDsluCounter, 3421 mSDsCounter, 0 mSdLazyCounter, 4957 mSolverCounterSat, 4007 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5597 SdHoareTripleChecker+Valid, 5334 SdHoareTripleChecker+Invalid, 8964 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 4007 IncrementalHoareTripleChecker+Valid, 4957 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:09:31,735 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5597 Valid, 5334 Invalid, 8964 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [4007 Valid, 4957 Invalid, 0 Unknown, 0 Unchecked, 10.0s Time] [2021-11-17 02:09:31,748 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17317 states. [2021-11-17 02:09:32,566 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17317 to 15209. [2021-11-17 02:09:32,580 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15209 states, 10601 states have (on average 1.380152815772097) internal successors, (14631), 11223 states have internal predecessors, (14631), 3519 states have call successors, (3519), 834 states have call predecessors, (3519), 1088 states have return successors, (4512), 3485 states have call predecessors, (4512), 3517 states have call successors, (4512) [2021-11-17 02:09:32,626 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15209 states to 15209 states and 22662 transitions. [2021-11-17 02:09:32,630 INFO L78 Accepts]: Start accepts. Automaton has 15209 states and 22662 transitions. Word has length 283 [2021-11-17 02:09:32,630 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:09:32,630 INFO L470 AbstractCegarLoop]: Abstraction has 15209 states and 22662 transitions. [2021-11-17 02:09:32,630 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-17 02:09:32,631 INFO L276 IsEmpty]: Start isEmpty. Operand 15209 states and 22662 transitions. [2021-11-17 02:09:32,653 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 301 [2021-11-17 02:09:32,653 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:09:32,653 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:09:32,654 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-11-17 02:09:32,654 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:09:32,654 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:09:32,655 INFO L85 PathProgramCache]: Analyzing trace with hash 1203076046, now seen corresponding path program 1 times [2021-11-17 02:09:32,655 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:09:32,655 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [349321928] [2021-11-17 02:09:32,655 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:32,655 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:09:32,704 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,792 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:09:32,794 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:32,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:09:32,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:32,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,828 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:09:32,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:32,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:09:32,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,845 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:32,849 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:09:32,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,865 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,869 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:09:32,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,883 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-17 02:09:32,892 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,897 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:32,901 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,904 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-11-17 02:09:32,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:32,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-11-17 02:09:32,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-17 02:09:32,932 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-11-17 02:09:32,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,943 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-17 02:09:32,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-17 02:09:32,951 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:32,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-17 02:09:32,966 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,969 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-11-17 02:09:32,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:32,998 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2021-11-17 02:09:33,001 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-11-17 02:09:33,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2021-11-17 02:09:33,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,013 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-11-17 02:09:33,014 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 247 [2021-11-17 02:09:33,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,021 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-11-17 02:09:33,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2021-11-17 02:09:33,027 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-11-17 02:09:33,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2021-11-17 02:09:33,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-11-17 02:09:33,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 286 [2021-11-17 02:09:33,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,049 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 359 trivial. 0 not checked. [2021-11-17 02:09:33,049 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:09:33,050 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [349321928] [2021-11-17 02:09:33,050 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [349321928] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 02:09:33,050 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [2008760066] [2021-11-17 02:09:33,050 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:33,050 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:09:33,050 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:09:33,059 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 02:09:33,071 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-17 02:09:33,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:33,831 INFO L263 TraceCheckSpWp]: Trace formula consists of 2635 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 02:09:33,858 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:09:34,380 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 359 trivial. 0 not checked. [2021-11-17 02:09:34,381 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 02:09:34,381 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [2008760066] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:09:34,381 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:09:34,381 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-11-17 02:09:34,381 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [725938754] [2021-11-17 02:09:34,382 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:09:34,382 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 02:09:34,382 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:09:34,383 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 02:09:34,383 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2021-11-17 02:09:34,383 INFO L87 Difference]: Start difference. First operand 15209 states and 22662 transitions. Second operand has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-17 02:09:35,479 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:09:35,479 INFO L93 Difference]: Finished difference Result 27743 states and 41384 transitions. [2021-11-17 02:09:35,480 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-17 02:09:35,480 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 300 [2021-11-17 02:09:35,480 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:09:35,578 INFO L225 Difference]: With dead ends: 27743 [2021-11-17 02:09:35,578 INFO L226 Difference]: Without dead ends: 21498 [2021-11-17 02:09:35,616 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 390 GetRequests, 376 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2021-11-17 02:09:35,616 INFO L933 BasicCegarLoop]: 4272 mSDtfsCounter, 2817 mSDsluCounter, 9977 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 242 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2839 SdHoareTripleChecker+Valid, 14249 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 242 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-17 02:09:35,617 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2839 Valid, 14249 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [242 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-17 02:09:35,640 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21498 states. [2021-11-17 02:09:36,390 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21498 to 15233. [2021-11-17 02:09:36,403 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15233 states, 10615 states have (on average 1.3796514366462553) internal successors, (14645), 11239 states have internal predecessors, (14645), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1088 states have return successors, (4524), 3495 states have call predecessors, (4524), 3527 states have call successors, (4524) [2021-11-17 02:09:36,448 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15233 states to 15233 states and 22698 transitions. [2021-11-17 02:09:36,451 INFO L78 Accepts]: Start accepts. Automaton has 15233 states and 22698 transitions. Word has length 300 [2021-11-17 02:09:36,451 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:09:36,451 INFO L470 AbstractCegarLoop]: Abstraction has 15233 states and 22698 transitions. [2021-11-17 02:09:36,451 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-17 02:09:36,451 INFO L276 IsEmpty]: Start isEmpty. Operand 15233 states and 22698 transitions. [2021-11-17 02:09:36,473 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 301 [2021-11-17 02:09:36,473 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:09:36,473 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:09:36,502 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-17 02:09:36,687 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-11-17 02:09:36,688 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:09:36,688 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:09:36,688 INFO L85 PathProgramCache]: Analyzing trace with hash -703327220, now seen corresponding path program 1 times [2021-11-17 02:09:36,688 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:09:36,688 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [519916410] [2021-11-17 02:09:36,688 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:36,688 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:09:36,804 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:09:36,890 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,899 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:36,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:36,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:09:36,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,917 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:36,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,920 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:36,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,924 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:09:36,926 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,930 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:36,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:36,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:09:36,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,942 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:36,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:36,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,957 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:09:36,959 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,964 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:36,964 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:36,980 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-17 02:09:36,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:37,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,006 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-17 02:09:37,008 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:37,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:37,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,019 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-11-17 02:09:37,021 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:37,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:37,029 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-11-17 02:09:37,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,072 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-17 02:09:37,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-11-17 02:09:37,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-17 02:09:37,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,088 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-17 02:09:37,089 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:37,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-17 02:09:37,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-11-17 02:09:37,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,143 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2021-11-17 02:09:37,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-11-17 02:09:37,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2021-11-17 02:09:37,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,159 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-11-17 02:09:37,160 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 247 [2021-11-17 02:09:37,165 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,168 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-11-17 02:09:37,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,173 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2021-11-17 02:09:37,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-11-17 02:09:37,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,182 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2021-11-17 02:09:37,184 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,188 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-11-17 02:09:37,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,192 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 286 [2021-11-17 02:09:37,194 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:37,198 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-11-17 02:09:37,199 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:09:37,199 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [519916410] [2021-11-17 02:09:37,199 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [519916410] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 02:09:37,199 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [729000461] [2021-11-17 02:09:37,199 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:37,199 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:09:37,200 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:09:37,201 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 02:09:37,202 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-17 02:09:38,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:38,021 INFO L263 TraceCheckSpWp]: Trace formula consists of 2630 conjuncts, 11 conjunts are in the unsatisfiable core [2021-11-17 02:09:38,030 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:09:38,728 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 121 proven. 0 refuted. 0 times theorem prover too weak. 253 trivial. 0 not checked. [2021-11-17 02:09:38,729 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-17 02:09:38,729 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [729000461] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:09:38,729 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:09:38,729 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2021-11-17 02:09:38,729 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1427992614] [2021-11-17 02:09:38,729 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:09:38,730 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 02:09:38,730 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:09:38,730 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 02:09:38,731 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-11-17 02:09:38,731 INFO L87 Difference]: Start difference. First operand 15233 states and 22698 transitions. Second operand has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-11-17 02:09:39,493 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:09:39,493 INFO L93 Difference]: Finished difference Result 30477 states and 45444 transitions. [2021-11-17 02:09:39,494 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 02:09:39,494 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) Word has length 300 [2021-11-17 02:09:39,494 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:09:39,564 INFO L225 Difference]: With dead ends: 30477 [2021-11-17 02:09:39,564 INFO L226 Difference]: Without dead ends: 15263 [2021-11-17 02:09:39,611 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 388 GetRequests, 373 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=41, Invalid=231, Unknown=0, NotChecked=0, Total=272 [2021-11-17 02:09:39,612 INFO L933 BasicCegarLoop]: 2244 mSDtfsCounter, 6 mSDsluCounter, 8962 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11206 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:09:39,612 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11206 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 02:09:39,623 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15263 states. [2021-11-17 02:09:40,299 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15263 to 15236. [2021-11-17 02:09:40,312 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15236 states, 10617 states have (on average 1.3796741075633419) internal successors, (14648), 11242 states have internal predecessors, (14648), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1089 states have return successors, (4528), 3495 states have call predecessors, (4528), 3527 states have call successors, (4528) [2021-11-17 02:09:40,354 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15236 states to 15236 states and 22705 transitions. [2021-11-17 02:09:40,358 INFO L78 Accepts]: Start accepts. Automaton has 15236 states and 22705 transitions. Word has length 300 [2021-11-17 02:09:40,358 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:09:40,358 INFO L470 AbstractCegarLoop]: Abstraction has 15236 states and 22705 transitions. [2021-11-17 02:09:40,359 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-11-17 02:09:40,359 INFO L276 IsEmpty]: Start isEmpty. Operand 15236 states and 22705 transitions. [2021-11-17 02:09:40,373 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 303 [2021-11-17 02:09:40,373 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:09:40,373 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:09:40,403 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-17 02:09:40,599 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-11-17 02:09:40,599 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:09:40,600 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:09:40,600 INFO L85 PathProgramCache]: Analyzing trace with hash -1296151014, now seen corresponding path program 1 times [2021-11-17 02:09:40,600 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:09:40,600 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1619836596] [2021-11-17 02:09:40,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:40,600 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:09:40,697 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,779 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:09:40,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,793 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:40,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,800 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:09:40,801 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:40,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:09:40,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:40,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,824 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:09:40,825 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,829 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,832 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:40,833 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,844 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:09:40,846 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,857 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-17 02:09:40,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-17 02:09:40,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:40,875 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-11-17 02:09:40,879 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:09:40,887 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,898 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-11-17 02:09:40,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,926 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-11-17 02:09:40,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-17 02:09:40,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,936 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 02:09:40,937 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-11-17 02:09:40,942 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,945 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:09:40,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,956 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2021-11-17 02:09:40,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,961 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 219 [2021-11-17 02:09:40,962 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-11-17 02:09:40,995 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:40,999 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2021-11-17 02:09:41,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,003 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-11-17 02:09:41,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 245 [2021-11-17 02:09:41,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,012 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-11-17 02:09:41,013 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,017 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 258 [2021-11-17 02:09:41,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,020 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-11-17 02:09:41,022 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2021-11-17 02:09:41,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,029 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-11-17 02:09:41,031 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 284 [2021-11-17 02:09:41,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,039 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-11-17 02:09:41,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,045 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 362 trivial. 0 not checked. [2021-11-17 02:09:41,046 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:09:41,046 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1619836596] [2021-11-17 02:09:41,046 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1619836596] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 02:09:41,046 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1647253921] [2021-11-17 02:09:41,046 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:09:41,047 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:09:41,047 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:09:41,051 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 02:09:41,053 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-17 02:09:41,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:09:41,789 INFO L263 TraceCheckSpWp]: Trace formula consists of 2642 conjuncts, 12 conjunts are in the unsatisfiable core [2021-11-17 02:09:41,796 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:09:42,386 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 124 proven. 1 refuted. 0 times theorem prover too weak. 254 trivial. 0 not checked. [2021-11-17 02:09:42,386 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:09:43,227 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 368 trivial. 0 not checked. [2021-11-17 02:09:43,228 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1647253921] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:09:43,228 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 02:09:43,228 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 7, 7] total 20 [2021-11-17 02:09:43,228 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [127265361] [2021-11-17 02:09:43,228 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 02:09:43,229 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-11-17 02:09:43,229 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:09:43,230 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-11-17 02:09:43,230 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2021-11-17 02:09:43,230 INFO L87 Difference]: Start difference. First operand 15236 states and 22705 transitions. Second operand has 20 states, 18 states have (on average 11.444444444444445) internal successors, (206), 13 states have internal predecessors, (206), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-11-17 02:09:59,924 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:09:59,924 INFO L93 Difference]: Finished difference Result 32569 states and 49182 transitions. [2021-11-17 02:09:59,927 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-17 02:09:59,927 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 18 states have (on average 11.444444444444445) internal successors, (206), 13 states have internal predecessors, (206), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) Word has length 302 [2021-11-17 02:09:59,927 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:09:59,985 INFO L225 Difference]: With dead ends: 32569 [2021-11-17 02:09:59,986 INFO L226 Difference]: Without dead ends: 17352 [2021-11-17 02:10:00,023 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 705 GetRequests, 674 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=169, Invalid=887, Unknown=0, NotChecked=0, Total=1056 [2021-11-17 02:10:00,023 INFO L933 BasicCegarLoop]: 2033 mSDtfsCounter, 3528 mSDsluCounter, 18801 mSDsCounter, 0 mSdLazyCounter, 14025 mSolverCounterSat, 3338 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3679 SdHoareTripleChecker+Valid, 20834 SdHoareTripleChecker+Invalid, 17363 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3338 IncrementalHoareTripleChecker+Valid, 14025 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.3s IncrementalHoareTripleChecker+Time [2021-11-17 02:10:00,024 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3679 Valid, 20834 Invalid, 17363 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3338 Valid, 14025 Invalid, 0 Unknown, 0 Unchecked, 15.3s Time] [2021-11-17 02:10:00,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17352 states. [2021-11-17 02:10:00,774 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17352 to 15249. [2021-11-17 02:10:00,786 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15249 states, 10628 states have (on average 1.3793752352277004) internal successors, (14660), 11251 states have internal predecessors, (14660), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1091 states have return successors, (4537), 3499 states have call predecessors, (4537), 3527 states have call successors, (4537) [2021-11-17 02:10:00,826 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15249 states to 15249 states and 22726 transitions. [2021-11-17 02:10:00,829 INFO L78 Accepts]: Start accepts. Automaton has 15249 states and 22726 transitions. Word has length 302 [2021-11-17 02:10:00,830 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:10:00,830 INFO L470 AbstractCegarLoop]: Abstraction has 15249 states and 22726 transitions. [2021-11-17 02:10:00,830 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 18 states have (on average 11.444444444444445) internal successors, (206), 13 states have internal predecessors, (206), 4 states have call successors, (78), 8 states have call predecessors, (78), 6 states have return successors, (63), 5 states have call predecessors, (63), 4 states have call successors, (63) [2021-11-17 02:10:00,830 INFO L276 IsEmpty]: Start isEmpty. Operand 15249 states and 22726 transitions. [2021-11-17 02:10:00,846 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 311 [2021-11-17 02:10:00,847 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:10:00,847 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:10:00,869 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-17 02:10:01,047 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable15,4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:10:01,048 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:10:01,048 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:10:01,048 INFO L85 PathProgramCache]: Analyzing trace with hash -157963250, now seen corresponding path program 1 times [2021-11-17 02:10:01,049 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:10:01,049 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [256185338] [2021-11-17 02:10:01,049 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:10:01,049 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:10:01,108 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,186 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:10:01,188 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,207 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:01,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:10:01,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,216 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,217 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,219 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:01,221 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,224 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:10:01,226 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,233 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:01,234 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:10:01,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,243 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,246 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:01,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:10:01,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,266 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,267 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,271 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-17 02:10:01,272 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,282 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-11-17 02:10:01,283 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,287 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,287 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:01,293 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,296 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-11-17 02:10:01,298 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,302 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,305 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:01,305 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-11-17 02:10:01,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:10:01,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,325 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-17 02:10:01,326 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-17 02:10:01,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 186 [2021-11-17 02:10:01,334 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-11-17 02:10:01,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:01,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,415 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-11-17 02:10:01,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,478 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-11-17 02:10:01,481 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,514 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-11-17 02:10:01,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,521 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-11-17 02:10:01,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-11-17 02:10:01,529 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,533 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-11-17 02:10:01,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,539 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 257 [2021-11-17 02:10:01,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-11-17 02:10:01,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2021-11-17 02:10:01,551 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-11-17 02:10:01,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,562 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-11-17 02:10:01,565 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,570 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-11-17 02:10:01,571 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 296 [2021-11-17 02:10:01,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:01,581 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 395 trivial. 0 not checked. [2021-11-17 02:10:01,582 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:10:01,582 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [256185338] [2021-11-17 02:10:01,582 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [256185338] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-17 02:10:01,582 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:10:01,582 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2021-11-17 02:10:01,582 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1866550196] [2021-11-17 02:10:01,583 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:10:01,583 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 02:10:01,584 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:10:01,584 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 02:10:01,584 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-11-17 02:10:01,584 INFO L87 Difference]: Start difference. First operand 15249 states and 22726 transitions. Second operand has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-11-17 02:10:17,937 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:10:17,938 INFO L93 Difference]: Finished difference Result 22169 states and 33954 transitions. [2021-11-17 02:10:17,938 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-17 02:10:17,938 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) Word has length 310 [2021-11-17 02:10:17,939 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:10:18,016 INFO L225 Difference]: With dead ends: 22169 [2021-11-17 02:10:18,017 INFO L226 Difference]: Without dead ends: 18622 [2021-11-17 02:10:18,041 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=124, Invalid=428, Unknown=0, NotChecked=0, Total=552 [2021-11-17 02:10:18,042 INFO L933 BasicCegarLoop]: 2663 mSDtfsCounter, 3409 mSDsluCounter, 18845 mSDsCounter, 0 mSdLazyCounter, 11310 mSolverCounterSat, 2804 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3708 SdHoareTripleChecker+Valid, 21508 SdHoareTripleChecker+Invalid, 14114 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2804 IncrementalHoareTripleChecker+Valid, 11310 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:10:18,042 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3708 Valid, 21508 Invalid, 14114 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2804 Valid, 11310 Invalid, 0 Unknown, 0 Unchecked, 15.2s Time] [2021-11-17 02:10:18,056 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18622 states. [2021-11-17 02:10:18,828 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18622 to 15259. [2021-11-17 02:10:18,842 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15259 states, 10634 states have (on average 1.3791611811171713) internal successors, (14666), 11257 states have internal predecessors, (14666), 3531 states have call successors, (3531), 834 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-11-17 02:10:18,886 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15259 states to 15259 states and 22742 transitions. [2021-11-17 02:10:18,888 INFO L78 Accepts]: Start accepts. Automaton has 15259 states and 22742 transitions. Word has length 310 [2021-11-17 02:10:18,888 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:10:18,888 INFO L470 AbstractCegarLoop]: Abstraction has 15259 states and 22742 transitions. [2021-11-17 02:10:18,889 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-11-17 02:10:18,889 INFO L276 IsEmpty]: Start isEmpty. Operand 15259 states and 22742 transitions. [2021-11-17 02:10:18,904 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-11-17 02:10:18,905 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:10:18,905 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:10:18,905 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-11-17 02:10:18,905 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:10:18,906 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:10:18,906 INFO L85 PathProgramCache]: Analyzing trace with hash 1550664252, now seen corresponding path program 1 times [2021-11-17 02:10:18,906 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:10:18,906 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1952588628] [2021-11-17 02:10:18,906 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:10:18,906 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:10:18,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,030 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:10:19,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,041 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:19,042 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:10:19,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,052 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:19,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,055 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:10:19,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,060 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:19,064 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,066 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:10:19,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,071 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,071 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:19,074 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:10:19,091 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-17 02:10:19,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,218 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,223 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-11-17 02:10:19,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:19,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-11-17 02:10:19,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,242 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:19,246 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-11-17 02:10:19,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,269 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:10:19,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-17 02:10:19,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,277 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-17 02:10:19,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,281 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 186 [2021-11-17 02:10:19,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-11-17 02:10:19,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,289 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:19,290 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,304 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-11-17 02:10:19,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-11-17 02:10:19,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-11-17 02:10:19,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-11-17 02:10:19,354 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,357 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-11-17 02:10:19,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,362 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-11-17 02:10:19,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,366 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 257 [2021-11-17 02:10:19,367 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-11-17 02:10:19,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2021-11-17 02:10:19,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-11-17 02:10:19,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,382 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-11-17 02:10:19,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-11-17 02:10:19,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 296 [2021-11-17 02:10:19,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:19,397 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 394 trivial. 0 not checked. [2021-11-17 02:10:19,397 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:10:19,397 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1952588628] [2021-11-17 02:10:19,397 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1952588628] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 02:10:19,397 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [229769270] [2021-11-17 02:10:19,398 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:10:19,398 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:10:19,398 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:10:19,399 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 02:10:19,400 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-17 02:10:20,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:20,163 INFO L263 TraceCheckSpWp]: Trace formula consists of 2677 conjuncts, 19 conjunts are in the unsatisfiable core [2021-11-17 02:10:20,170 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:10:20,757 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 145 proven. 3 refuted. 0 times theorem prover too weak. 264 trivial. 0 not checked. [2021-11-17 02:10:20,757 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:10:21,521 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 394 trivial. 0 not checked. [2021-11-17 02:10:21,522 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [229769270] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:10:21,522 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 02:10:21,522 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 8] total 22 [2021-11-17 02:10:21,523 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [672136175] [2021-11-17 02:10:21,523 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 02:10:21,524 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-11-17 02:10:21,524 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:10:21,524 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-11-17 02:10:21,525 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-11-17 02:10:21,525 INFO L87 Difference]: Start difference. First operand 15259 states and 22742 transitions. Second operand has 22 states, 20 states have (on average 9.0) internal successors, (180), 16 states have internal predecessors, (180), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 02:10:41,356 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:10:41,356 INFO L93 Difference]: Finished difference Result 32614 states and 49311 transitions. [2021-11-17 02:10:41,358 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-11-17 02:10:41,358 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 9.0) internal successors, (180), 16 states have internal predecessors, (180), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 311 [2021-11-17 02:10:41,358 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:10:41,415 INFO L225 Difference]: With dead ends: 32614 [2021-11-17 02:10:41,416 INFO L226 Difference]: Without dead ends: 17374 [2021-11-17 02:10:41,453 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 726 GetRequests, 691 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2021-11-17 02:10:41,454 INFO L933 BasicCegarLoop]: 2016 mSDtfsCounter, 3552 mSDsluCounter, 16331 mSDsCounter, 0 mSdLazyCounter, 13192 mSolverCounterSat, 3394 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3703 SdHoareTripleChecker+Valid, 18347 SdHoareTripleChecker+Invalid, 16586 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3394 IncrementalHoareTripleChecker+Valid, 13192 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 18.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:10:41,455 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3703 Valid, 18347 Invalid, 16586 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3394 Valid, 13192 Invalid, 0 Unknown, 0 Unchecked, 18.2s Time] [2021-11-17 02:10:41,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17374 states. [2021-11-17 02:10:42,139 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17374 to 15260. [2021-11-17 02:10:42,153 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15260 states, 10635 states have (on average 1.3792195580629996) internal successors, (14668), 11258 states have internal predecessors, (14668), 3531 states have call successors, (3531), 834 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-11-17 02:10:42,200 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15260 states to 15260 states and 22744 transitions. [2021-11-17 02:10:42,204 INFO L78 Accepts]: Start accepts. Automaton has 15260 states and 22744 transitions. Word has length 311 [2021-11-17 02:10:42,204 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:10:42,204 INFO L470 AbstractCegarLoop]: Abstraction has 15260 states and 22744 transitions. [2021-11-17 02:10:42,204 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 9.0) internal successors, (180), 16 states have internal predecessors, (180), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 02:10:42,204 INFO L276 IsEmpty]: Start isEmpty. Operand 15260 states and 22744 transitions. [2021-11-17 02:10:42,219 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 314 [2021-11-17 02:10:42,220 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:10:42,220 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:10:42,242 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2021-11-17 02:10:42,420 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2021-11-17 02:10:42,421 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:10:42,421 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:10:42,421 INFO L85 PathProgramCache]: Analyzing trace with hash -804403218, now seen corresponding path program 2 times [2021-11-17 02:10:42,421 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:10:42,421 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1314964867] [2021-11-17 02:10:42,422 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:10:42,422 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:10:42,493 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,541 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:10:42,543 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,550 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,553 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:42,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,557 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-17 02:10:42,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,563 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:42,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,569 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-17 02:10:42,570 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:42,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-17 02:10:42,581 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:42,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,597 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-17 02:10:42,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-11-17 02:10:42,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-11-17 02:10:42,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,774 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:42,777 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-11-17 02:10:42,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,786 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-17 02:10:42,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-11-17 02:10:42,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,814 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-17 02:10:42,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-17 02:10:42,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-11-17 02:10:42,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,826 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-11-17 02:10:42,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 193 [2021-11-17 02:10:42,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-17 02:10:42,835 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,851 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-11-17 02:10:42,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,856 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 229 [2021-11-17 02:10:42,857 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 233 [2021-11-17 02:10:42,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2021-11-17 02:10:42,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 246 [2021-11-17 02:10:42,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,910 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-11-17 02:10:42,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 259 [2021-11-17 02:10:42,916 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 268 [2021-11-17 02:10:42,919 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,922 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 272 [2021-11-17 02:10:42,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,927 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 281 [2021-11-17 02:10:42,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,931 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 285 [2021-11-17 02:10:42,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,937 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 294 [2021-11-17 02:10:42,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,941 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 298 [2021-11-17 02:10:42,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:10:42,947 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-11-17 02:10:42,948 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-17 02:10:42,948 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1314964867] [2021-11-17 02:10:42,948 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1314964867] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-17 02:10:42,948 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [1123423307] [2021-11-17 02:10:42,949 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 02:10:42,949 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:10:42,949 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:10:42,950 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-17 02:10:42,978 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-17 02:10:44,111 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-11-17 02:10:44,112 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 02:10:44,127 INFO L263 TraceCheckSpWp]: Trace formula consists of 2689 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-17 02:10:44,133 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:10:44,775 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 152 proven. 6 refuted. 0 times theorem prover too weak. 267 trivial. 0 not checked. [2021-11-17 02:10:44,775 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:10:45,667 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-11-17 02:10:45,667 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [1123423307] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:10:45,667 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-17 02:10:45,668 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 9] total 24 [2021-11-17 02:10:45,668 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1693399350] [2021-11-17 02:10:45,668 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-17 02:10:45,669 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-11-17 02:10:45,669 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-17 02:10:45,669 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-11-17 02:10:45,670 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-11-17 02:10:45,670 INFO L87 Difference]: Start difference. First operand 15260 states and 22744 transitions. Second operand has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 02:11:11,914 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:11:11,914 INFO L93 Difference]: Finished difference Result 32645 states and 49423 transitions. [2021-11-17 02:11:11,914 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-17 02:11:11,915 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 313 [2021-11-17 02:11:11,915 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:11:11,965 INFO L225 Difference]: With dead ends: 32645 [2021-11-17 02:11:11,965 INFO L226 Difference]: Without dead ends: 17404 [2021-11-17 02:11:11,994 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 733 GetRequests, 693 SyntacticMatches, 3 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 254 ImplicationChecksByTransitivity, 0.9s TimeCoverageRelationStatistics Valid=237, Invalid=1245, Unknown=0, NotChecked=0, Total=1482 [2021-11-17 02:11:11,995 INFO L933 BasicCegarLoop]: 2030 mSDtfsCounter, 3128 mSDsluCounter, 19363 mSDsCounter, 0 mSdLazyCounter, 15318 mSolverCounterSat, 2895 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 21.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3282 SdHoareTripleChecker+Valid, 21393 SdHoareTripleChecker+Invalid, 18213 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2895 IncrementalHoareTripleChecker+Valid, 15318 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 24.7s IncrementalHoareTripleChecker+Time [2021-11-17 02:11:11,995 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3282 Valid, 21393 Invalid, 18213 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2895 Valid, 15318 Invalid, 0 Unknown, 0 Unchecked, 24.7s Time] [2021-11-17 02:11:12,005 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17404 states. [2021-11-17 02:11:12,620 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17404 to 15261. [2021-11-17 02:11:12,634 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15261 states, 10636 states have (on average 1.3792779240315909) internal successors, (14670), 11259 states have internal predecessors, (14670), 3531 states have call successors, (3531), 834 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-11-17 02:11:12,679 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15261 states to 15261 states and 22746 transitions. [2021-11-17 02:11:12,683 INFO L78 Accepts]: Start accepts. Automaton has 15261 states and 22746 transitions. Word has length 313 [2021-11-17 02:11:12,683 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:11:12,683 INFO L470 AbstractCegarLoop]: Abstraction has 15261 states and 22746 transitions. [2021-11-17 02:11:12,684 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-17 02:11:12,684 INFO L276 IsEmpty]: Start isEmpty. Operand 15261 states and 22746 transitions. [2021-11-17 02:11:12,699 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 316 [2021-11-17 02:11:12,699 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:12,699 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:12,723 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Ended with exit code 0 [2021-11-17 02:11:12,900 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-17 02:11:12,900 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:12,900 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:12,900 INFO L85 PathProgramCache]: Analyzing trace with hash -1100694020, now seen corresponding path program 3 times [2021-11-17 02:11:12,901 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-17 02:11:12,901 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [382588402] [2021-11-17 02:11:12,901 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:11:12,901 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-17 02:11:13,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:11:13,319 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 02:11:13,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:11:14,114 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-17 02:11:14,115 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 02:11:14,115 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 02:11:14,117 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-11-17 02:11:14,120 INFO L732 BasicCegarLoop]: Path program histogram: [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:14,122 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 02:11:14,185 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:11:14,193 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:11:14,768 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 02:11:14 BoogieIcfgContainer [2021-11-17 02:11:14,769 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 02:11:14,769 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 02:11:14,769 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 02:11:14,770 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 02:11:14,770 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:07:13" (3/4) ... [2021-11-17 02:11:14,774 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 02:11:14,774 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 02:11:14,774 INFO L158 Benchmark]: Toolchain (without parser) took 248897.20ms. Allocated memory was 88.1MB in the beginning and 2.9GB in the end (delta: 2.8GB). Free memory was 45.2MB in the beginning and 1.7GB in the end (delta: -1.7GB). Peak memory consumption was 1.1GB. Max. memory is 16.1GB. [2021-11-17 02:11:14,777 INFO L158 Benchmark]: CDTParser took 6.96ms. Allocated memory is still 88.1MB. Free memory was 45.6MB in the beginning and 60.8MB in the end (delta: -15.2MB). Peak memory consumption was 5.7MB. Max. memory is 16.1GB. [2021-11-17 02:11:14,778 INFO L158 Benchmark]: CACSL2BoogieTranslator took 1871.35ms. Allocated memory was 88.1MB in the beginning and 148.9MB in the end (delta: 60.8MB). Free memory was 45.0MB in the beginning and 81.2MB in the end (delta: -36.2MB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. [2021-11-17 02:11:14,778 INFO L158 Benchmark]: Boogie Procedure Inliner took 265.30ms. Allocated memory is still 148.9MB. Free memory was 81.2MB in the beginning and 83.1MB in the end (delta: -2.0MB). Peak memory consumption was 35.1MB. Max. memory is 16.1GB. [2021-11-17 02:11:14,778 INFO L158 Benchmark]: Boogie Preprocessor took 195.27ms. Allocated memory is still 148.9MB. Free memory was 83.1MB in the beginning and 52.8MB in the end (delta: 30.3MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. [2021-11-17 02:11:14,778 INFO L158 Benchmark]: RCFGBuilder took 4850.83ms. Allocated memory was 148.9MB in the beginning and 375.4MB in the end (delta: 226.5MB). Free memory was 52.8MB in the beginning and 211.2MB in the end (delta: -158.4MB). Peak memory consumption was 91.7MB. Max. memory is 16.1GB. [2021-11-17 02:11:14,779 INFO L158 Benchmark]: TraceAbstraction took 241704.16ms. Allocated memory was 375.4MB in the beginning and 2.9GB in the end (delta: 2.5GB). Free memory was 211.2MB in the beginning and 1.7GB in the end (delta: -1.5GB). Peak memory consumption was 2.2GB. Max. memory is 16.1GB. [2021-11-17 02:11:14,779 INFO L158 Benchmark]: Witness Printer took 4.51ms. Allocated memory is still 2.9GB. Free memory is still 1.7GB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 02:11:14,782 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 6.96ms. Allocated memory is still 88.1MB. Free memory was 45.6MB in the beginning and 60.8MB in the end (delta: -15.2MB). Peak memory consumption was 5.7MB. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 1871.35ms. Allocated memory was 88.1MB in the beginning and 148.9MB in the end (delta: 60.8MB). Free memory was 45.0MB in the beginning and 81.2MB in the end (delta: -36.2MB). Peak memory consumption was 50.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 265.30ms. Allocated memory is still 148.9MB. Free memory was 81.2MB in the beginning and 83.1MB in the end (delta: -2.0MB). Peak memory consumption was 35.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 195.27ms. Allocated memory is still 148.9MB. Free memory was 83.1MB in the beginning and 52.8MB in the end (delta: 30.3MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. * RCFGBuilder took 4850.83ms. Allocated memory was 148.9MB in the beginning and 375.4MB in the end (delta: 226.5MB). Free memory was 52.8MB in the beginning and 211.2MB in the end (delta: -158.4MB). Peak memory consumption was 91.7MB. Max. memory is 16.1GB. * TraceAbstraction took 241704.16ms. Allocated memory was 375.4MB in the beginning and 2.9GB in the end (delta: 2.5GB). Free memory was 211.2MB in the beginning and 1.7GB in the end (delta: -1.5GB). Peak memory consumption was 2.2GB. Max. memory is 16.1GB. * Witness Printer took 4.51ms. Allocated memory is still 2.9GB. Free memory is still 1.7GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8176]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6875. Possible FailurePath: [L4318] int ldv_timer_state_5 = 0; [L4319] int ldv_state_variable_8 ; [L4320] struct timer_list *ldv_timer_list_5 ; [L4321] struct timer_list *ldv_timer_list_4 ; [L4322] struct work_struct *ldv_work_struct_3_1 ; [L4323] struct mmc_host *vub300_mmc_ops_group0 ; [L4324] struct work_struct *ldv_work_struct_1_3 ; [L4325] int ldv_state_variable_0 ; [L4326] int ldv_state_variable_5 ; [L4327] int ldv_work_1_1 ; [L4328] int ldv_work_3_2 ; [L4329] int ldv_work_3_0 ; [L4330] struct work_struct *ldv_work_struct_2_3 ; [L4331] struct work_struct *ldv_work_struct_2_0 ; [L4332] int ldv_timer_state_6 = 0; [L4333] struct work_struct *ldv_work_struct_2_2 ; [L4334] int ldv_timer_state_4 = 0; [L4335] int ref_cnt ; [L4336] int ldv_work_3_3 ; [L4337] int ldv_state_variable_1 ; [L4338] int ldv_state_variable_7 ; [L4339] struct work_struct *ldv_work_struct_3_3 ; [L4340] struct work_struct *ldv_work_struct_1_0 ; [L4341] struct work_struct *ldv_work_struct_1_1 ; [L4342] int ldv_work_1_3 ; [L4343] struct work_struct *ldv_work_struct_2_1 ; [L4344] struct timer_list *ldv_timer_list_6 ; [L4345] struct work_struct *ldv_work_struct_3_2 ; [L4346] int ldv_state_variable_6 ; [L4347] int ldv_work_3_1 ; [L4348] int ldv_state_variable_2 ; [L4349] int ldv_work_2_0 ; [L4350] int usb_counter ; [L4351] struct work_struct *ldv_work_struct_3_0 ; [L4352] int ldv_work_1_2 ; [L4353] int LDV_IN_INTERRUPT = 1; [L4354] struct work_struct *ldv_work_struct_1_2 ; [L4355] int ldv_work_2_2 ; [L4356] int ldv_state_variable_3 ; [L4357] struct usb_interface *vub300_driver_group1 ; [L4358] int ldv_work_1_0 ; [L4359] int ldv_work_2_3 ; [L4360] int ldv_state_variable_4 ; [L4361] int ldv_work_2_1 ; [L4422] static bool limit_speed_to_24_MHz ; [L4423] static bool pad_input_to_usb_pkt ; [L4424] static bool disable_offload_processing ; [L4425] static bool force_1_bit_data_xfers ; [L4426] static bool force_polling_for_irqs ; [L4427] static int firmware_irqpoll_timeout = 1024; [L4428] static int force_max_req_size = 128; [L4429] static int firmware_rom_wait_states = 28; [L4430-L4435] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4436] struct usb_device_id const __mod_usb_device_table ; [L4437] static struct workqueue_struct *cmndworkqueue ; [L4438] static struct workqueue_struct *pollworkqueue ; [L4439] static struct workqueue_struct *deadworkqueue ; [L6425-L6427] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6835-L6841] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6914] int ldv_retval_0 ; [L6916] int ldv_retval_1 ; [L6919] int ldv_retval_3 ; [L6920] int ldv_retval_2 ; [L8179] int URB_STATE = 0; [L8180] int DEV_STATE = 0; [L8181] int INTERF_STATE = 0; [L8182] int SERIAL_STATE = 0; [L8183] void *usb_intfdata = (void *)0; [L8184] struct urb *int_urb = (struct urb *)0; [L8185] struct urb *bulk_urb = (struct urb *)0; [L8186] void (*completeFnInt)(struct urb * ) ; [L8187] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7559] struct usb_device_id *ldvarg1 ; [L7560] void *tmp ; [L7561] pm_message_t ldvarg0 ; [L7562] struct mmc_card *ldvarg4 ; [L7563] void *tmp___0 ; [L7564] struct mmc_ios *ldvarg3 ; [L7565] void *tmp___1 ; [L7566] int ldvarg5 ; [L7567] struct mmc_request *ldvarg2 ; [L7568] void *tmp___2 ; [L7569] int tmp___3 ; [L7570] int tmp___4 ; [L7571] int tmp___5 ; [L7572] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7574] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-110680464442257309697:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-110680464442257309697:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-110680464442257309697:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7574] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-110680464442257309697:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7574] tmp = ldv_init_zalloc(32UL) [L7575] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7576] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7576] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7576] tmp___0 = ldv_init_zalloc(1816UL) [L7577] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7578] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-129127208515966861313:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-129127208515966861313:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-129127208515966861313:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-129127208515966861313:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-129127208515966861313:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-129127208515966861313:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-129127208515966861313:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={-129127208515966861313:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-129127208515966861313:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-129127208515966861313:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-129127208515966861313:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7578] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={-129127208515966861313:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7578] tmp___1 = ldv_init_zalloc(16UL) [L7579] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7580] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-36893488147419103233:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7580] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-36893488147419103233:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7580] tmp___2 = ldv_init_zalloc(136UL) [L7581] ldvarg2 = (struct mmc_request *)tmp___2 [L7582] FCALL ldv_initialize() [L7583] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={91:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={91:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={91:0}, s={91:0}, SERIAL_STATE=0, tmp={91:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7583] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={91:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7584] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={90:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={90:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, tmp={90:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7584] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={90:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7585] ldv_state_variable_6 = 1 [L7586] CALL work_init_3() [L6924] ldv_work_3_0 = 0 [L6925] ldv_work_3_1 = 0 [L6926] ldv_work_3_2 = 0 [L6927] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7586] RET work_init_3() [L7587] ldv_state_variable_3 = 1 [L7588] ldv_state_variable_7 = 0 [L7589] CALL work_init_2() [L6974] ldv_work_2_0 = 0 [L6975] ldv_work_2_1 = 0 [L6976] ldv_work_2_2 = 0 [L6977] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7589] RET work_init_2() [L7590] ldv_state_variable_2 = 1 [L7591] ldv_state_variable_8 = 0 [L7592] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7592] RET work_init_1() [L7593] ldv_state_variable_1 = 1 [L7594] ldv_state_variable_4 = 1 [L7595] ref_cnt = 0 [L7596] ldv_state_variable_0 = 1 [L7597] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=7, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: [L7752] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7753] COND TRUE ldv_state_variable_0 == 1 [L7754] CALL, EXPR vub300_init() [L6844] int result ; [L6845] struct lock_class_key __key ; [L6846] char const *__lock_name ; [L6847] struct workqueue_struct *tmp ; [L6848] struct lock_class_key __key___0 ; [L6849] char const *__lock_name___0 ; [L6850] struct workqueue_struct *tmp___0 ; [L6851] struct lock_class_key __key___1 ; [L6852] char const *__lock_name___1 ; [L6853] struct workqueue_struct *tmp___1 ; [L6857] __lock_name = "kvub300c" [L6858] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6859] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-98:99}, __key={93:0}, __key___0={94:0}, __key___1={97:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-98:99}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6860] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6866] __lock_name___0 = "kvub300p" [L6867] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6868] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-98:99}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={101:-100}, __key={93:0}, __key___0={94:0}, __key___1={97:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-98:99}, tmp___0={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6869] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6875] __lock_name___1 = "kvub300d" [L6876] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6877] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-98:99}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={102:-101}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={101:-100}, __key={93:0}, __key___0={94:0}, __key___1={97:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-98:99}, tmp___0={101:-100}, tmp___1={102:-101}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6878] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8081] ldv_func_ret_type___12 ldv_func_res ; [L8082] int tmp ; [L8084] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8556] return __VERIFIER_nondet_int(); [L8084] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8084] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8085] ldv_func_res = tmp [L8086] ldv_state_variable_7 = 1 [L8087] usb_counter = 0 [L8088] CALL ldv_usb_driver_7() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, cond=1, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-55340232221128654849:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-55340232221128654849:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L8088] RET ldv_usb_driver_7() [L8089] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={8707:8706}, ldv_func_arg2={8707:8706}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L6884] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6884] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6885] COND FALSE !(result != 0) [L6890] return (0); [L6890] return (0); [L6890] return (0); [L6890] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-98:99}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={102:-101}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={101:-100}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-98:99}, tmp___0={101:-100}, tmp___1={102:-101}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7754] RET, EXPR vub300_init() [L7754] ldv_retval_3 = vub300_init() [L7755] COND TRUE ldv_retval_3 == 0 [L7756] ldv_state_variable_0 = 3 [L7757] ldv_state_variable_8 = 1 [L7758] CALL ldv_initialize_mmc_host_ops_8() [L7193] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7195] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, cond=1, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-73786976294838206465:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7195] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-73786976294838206465:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={0:0}, vub300_table={87:0}] [L7195] tmp = ldv_init_zalloc(2624UL) [L7196] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7758] RET ldv_initialize_mmc_host_ops_8() [L7761] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=2, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7614] COND TRUE ldv_state_variable_7 != 0 [L7615] tmp___4 = __VERIFIER_nondet_int() [L7617] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7618] COND TRUE ldv_state_variable_7 == 1 [L7619] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6430] struct vub300_mmc_host *vub300 ; [L6431] struct usb_host_interface *iface_desc ; [L6432] struct usb_device *udev ; [L6433] struct usb_device *tmp ; [L6434] struct usb_device *tmp___0 ; [L6435] int i ; [L6436] int retval ; [L6437] struct urb *command_out_urb ; [L6438] struct urb *command_res_urb ; [L6439] struct mmc_host *mmc ; [L6440] char manufacturer[48U] ; [L6441] char product[32U] ; [L6442] char serial_number[32U] ; [L6443] void *tmp___1 ; [L6444] struct lock_class_key __key ; [L6445] struct lock_class_key __key___0 ; [L6446] int tmp___2 ; [L6447] struct usb_endpoint_descriptor *endpoint ; [L6448] int tmp___4 ; [L6449] char *tmp___5 ; [L6450] int tmp___6 ; [L6451] int tmp___7 ; [L6452] int tmp___8 ; [L6453] unsigned int tmp___9 ; [L6454] unsigned int tmp___10 ; [L6455] unsigned int tmp___11 ; [L6456] struct lock_class_key __key___1 ; [L6457] atomic_long_t __constr_expr_0 ; [L6458] struct lock_class_key __key___2 ; [L6459] atomic_long_t __constr_expr_1 ; [L6460] struct lock_class_key __key___3 ; [L6461] atomic_long_t __constr_expr_2 ; [L6462] int tmp___12 ; [L6463] int tmp___13 ; [L6465] CALL, EXPR interface_to_usbdev(interface) [L7824] struct usb_device *tmp ; [L7826] CALL, EXPR ldv_interface_to_usbdev() [L8302] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8307] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND FALSE !(tmp___0 != 0) [L4246] tmp = malloc(size) [L4247] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-92233720368547758081:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L4248] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, cond=1, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L4248] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-92233720368547758081:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L4249] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-92233720368547758081:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8307] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-92233720368547758081:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8307] result = ldv_malloc(sizeof(struct usb_device)) [L8308] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8312] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, result={-92233720368547758081:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7826] RET, EXPR ldv_interface_to_usbdev() [L7826] tmp = ldv_interface_to_usbdev() [L7827] return (tmp); VAL [={0:0}, ={0:0}, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-55340232221128654849:0}, intf={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6465] RET, EXPR interface_to_usbdev(interface) [L6465] tmp = interface_to_usbdev(interface) [L6466] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8021] CALL ldv_get_dev(ldv_func_arg1) [L8318] DEV_STATE = DEV_STATE + 1 [L8319] return (data); VAL [={0:0}, ={0:0}, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, data={-92233720368547758081:0}, data={-92233720368547758081:0}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8021] RET ldv_get_dev(ldv_func_arg1) [L8022] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-92233720368547758081:0}, ldv_func_arg1={-92233720368547758081:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6466] RET, EXPR ldv_usb_get_dev_43(tmp) [L6466] tmp___0 = ldv_usb_get_dev_43(tmp) [L6467] udev = tmp___0 [L6468] retval = -12 [L6469] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={106:0}, __key={103:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-110680464442257309697:0}, id={-110680464442257309697:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={107:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6469-L6470] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=125, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={107:0}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8574] return __VERIFIER_nondet_int(); [L6469-L6470] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={106:0}, __key={103:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-110680464442257309697:0}, id={-110680464442257309697:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={107:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=0, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6471] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={106:0}, __key={103:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-110680464442257309697:0}, id={-110680464442257309697:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={107:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6471] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=126, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={109:0}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8574] return __VERIFIER_nondet_int(); [L6471] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={106:0}, __key={103:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-110680464442257309697:0}, id={-110680464442257309697:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={107:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=0, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6472] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={106:0}, __key={103:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-110680464442257309697:0}, id={-110680464442257309697:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={107:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6472-L6473] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=127, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={114:0}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8574] return __VERIFIER_nondet_int(); [L6472-L6473] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={122:0}, __constr_expr_1={85:0}, __constr_expr_2={106:0}, __key={103:0}, __key___0={111:0}, __key___1={121:0}, __key___2={123:0}, __key___3={113:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-110680464442257309697:0}, id={-110680464442257309697:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={107:0}, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, product={109:0}, ref_cnt=0, retval=-12, serial_number={114:0}, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=127, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=0, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6475] udev->descriptor.idVendor [L6475] udev->descriptor.idProduct [L6477] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8027] ldv_func_ret_type___10 ldv_func_res ; [L8028] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8030] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8532] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND TRUE tmp___0 != 0 [L4244] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8532] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0=0, arg1=208, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8532] return ldv_malloc(sizeof(struct urb)); [L8030] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8030] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8031] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8032] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8211] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8032] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8033] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6477] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6477] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6478] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6479] retval = -12 [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, command_out_urb={0:0}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-110680464442257309697:0}, id={-110680464442257309697:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, retval=-12, SERIAL_STATE=0, tmp={-92233720368547758081:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7619] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7619] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7620] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=7, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7745] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7746] CALL vub300_exit() [L6904] CALL ldv_usb_deregister_60(& vub300_driver) [L8119] FCALL usb_deregister(arg) [L8120] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg={86:0}, arg={86:0}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6904] RET ldv_usb_deregister_60(& vub300_driver) [L6905] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8127] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-98:99}, ldv_func_arg1={-98:99}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8128] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8128] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-98:99}, ldv_func_arg1={-98:99}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6905] RET ldv_flush_workqueue_61(cmndworkqueue) [L6906] CALL ldv_flush_workqueue_62(pollworkqueue) [L8135] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8136] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8136] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6906] RET ldv_flush_workqueue_62(pollworkqueue) [L6907] CALL ldv_flush_workqueue_63(deadworkqueue) [L8143] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={102:-101}, ldv_func_arg1={102:-101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8144] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8144] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={102:-101}, ldv_func_arg1={102:-101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6907] RET ldv_flush_workqueue_63(deadworkqueue) [L6908] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8151] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-98:99}, ldv_func_arg1={-98:99}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8152] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8152] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-98:99}, ldv_func_arg1={-98:99}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6908] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6909] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8159] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8160] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8160] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6909] RET ldv_destroy_workqueue_65(pollworkqueue) [L6910] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8167] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={102:-101}, ldv_func_arg1={102:-101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8168] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8168] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={102:-101}, ldv_func_arg1={102:-101}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L6910] RET ldv_destroy_workqueue_66(deadworkqueue) [L7746] RET vub300_exit() [L7747] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={91:0}, ldvarg1={-110680464442257309697:0}, ldvarg2={-36893488147419103233:0}, ldvarg3={-129127208515966861313:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={90:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, tmp={-110680464442257309697:0}, tmp___0={-18446744073709551617:0}, tmp___1={-129127208515966861313:0}, tmp___2={-36893488147419103233:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L7788] CALL ldv_check_final_state() [L8380] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8384] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8385] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] [L8176] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-98:99}, deadworkqueue={102:-101}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={101:-100}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={89:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={87:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1587 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 241.0s, OverallIterations: 20, TraceHistogramMax: 8, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.4s, AutomataDifference: 207.8s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.1s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 77966 SdHoareTripleChecker+Valid, 190.3s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 74128 mSDsluCounter, 183733 SdHoareTripleChecker+Invalid, 170.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 139756 mSDsCounter, 54119 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 108472 IncrementalHoareTripleChecker+Invalid, 162591 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 54119 mSolverCounterUnsat, 43977 mSDtfsCounter, 108472 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3958 GetRequests, 3629 SyntacticMatches, 5 SemanticMatches, 324 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1287 ImplicationChecksByTransitivity, 4.0s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=24675occurred in iteration=8, InterpolantAutomatonStates: 231, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 12.4s AutomataMinimizationTime, 19 MinimizatonAttempts, 37674 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.6s SsaConstructionTime, 3.4s SatisfiabilityAnalysisTime, 12.2s InterpolantComputationTime, 6236 NumberOfCodeBlocks, 6236 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 6820 ConstructedInterpolants, 0 QuantifiedInterpolants, 12960 SizeOfPredicates, 10 NumberOfNonLiveVariables, 13273 ConjunctsInSsa, 61 ConjunctsInUnsatCore, 27 InterpolantComputations, 16 PerfectInterpolantSequences, 7113/7245 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 02:11:15,010 WARN L435 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-11-17 02:11:15,050 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerReach.xml -i ../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-0f8a17c [2021-11-17 02:11:16,820 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-17 02:11:16,823 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-17 02:11:16,860 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-17 02:11:16,860 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-17 02:11:16,861 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-17 02:11:16,862 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-17 02:11:16,864 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-17 02:11:16,865 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-17 02:11:16,866 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-17 02:11:16,867 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-17 02:11:16,868 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-17 02:11:16,868 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-17 02:11:16,869 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-17 02:11:16,870 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-17 02:11:16,871 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-17 02:11:16,872 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-17 02:11:16,873 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-17 02:11:16,874 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-17 02:11:16,878 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-17 02:11:16,881 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-17 02:11:16,882 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-17 02:11:16,883 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-17 02:11:16,884 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-17 02:11:16,889 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-17 02:11:16,890 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-17 02:11:16,890 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-17 02:11:16,892 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-17 02:11:16,893 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-17 02:11:16,895 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-17 02:11:16,896 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-17 02:11:16,897 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-17 02:11:16,898 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-17 02:11:16,898 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-17 02:11:16,899 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-17 02:11:16,899 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-17 02:11:16,905 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-17 02:11:16,906 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-17 02:11:16,906 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-17 02:11:16,907 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-17 02:11:16,908 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-17 02:11:16,909 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-17 02:11:16,928 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-17 02:11:16,928 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-17 02:11:16,928 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-17 02:11:16,928 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-17 02:11:16,929 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-17 02:11:16,929 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-17 02:11:16,930 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-17 02:11:16,930 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-17 02:11:16,930 INFO L138 SettingsManager]: * Use SBE=true [2021-11-17 02:11:16,931 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-17 02:11:16,931 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-17 02:11:16,931 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-17 02:11:16,931 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-17 02:11:16,931 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-17 02:11:16,932 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-17 02:11:16,932 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-17 02:11:16,932 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-17 02:11:16,932 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-17 02:11:16,932 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-17 02:11:16,933 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-17 02:11:16,933 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-17 02:11:16,933 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-17 02:11:16,933 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 02:11:16,934 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-17 02:11:16,934 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-17 02:11:16,934 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-17 02:11:16,934 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-17 02:11:16,934 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-17 02:11:16,935 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-17 02:11:16,935 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-17 02:11:16,935 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-17 02:11:16,935 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-17 02:11:16,936 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-17 02:11:16,936 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 [2021-11-17 02:11:17,240 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-17 02:11:17,262 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-17 02:11:17,264 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-17 02:11:17,265 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-17 02:11:17,266 INFO L275 PluginConnector]: CDTParser initialized [2021-11-17 02:11:17,267 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:11:17,324 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb1bb1869/59765632f5044674bdd86d8784f8bd4f/FLAGcaae475ec [2021-11-17 02:11:18,115 INFO L306 CDTParser]: Found 1 translation units. [2021-11-17 02:11:18,118 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:11:18,167 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb1bb1869/59765632f5044674bdd86d8784f8bd4f/FLAGcaae475ec [2021-11-17 02:11:18,191 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/cb1bb1869/59765632f5044674bdd86d8784f8bd4f [2021-11-17 02:11:18,194 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-17 02:11:18,195 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-17 02:11:18,196 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-17 02:11:18,196 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-17 02:11:18,201 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-17 02:11:18,202 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 02:11:18" (1/1) ... [2021-11-17 02:11:18,203 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@24a3e234 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:18, skipping insertion in model container [2021-11-17 02:11:18,203 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.11 02:11:18" (1/1) ... [2021-11-17 02:11:18,209 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-17 02:11:18,317 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-17 02:11:19,979 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-17 02:11:20,029 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 02:11:20,058 INFO L203 MainTranslator]: Completed pre-run [2021-11-17 02:11:20,371 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-17 02:11:20,383 INFO L207 PostProcessor]: Analyzing one entry point: main [2021-11-17 02:11:20,472 INFO L208 MainTranslator]: Completed translation [2021-11-17 02:11:20,473 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20 WrapperNode [2021-11-17 02:11:20,473 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-17 02:11:20,474 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-17 02:11:20,474 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-17 02:11:20,475 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-17 02:11:20,480 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,555 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,672 INFO L137 Inliner]: procedures = 275, calls = 1808, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4398 [2021-11-17 02:11:20,673 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-17 02:11:20,673 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-17 02:11:20,674 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-17 02:11:20,674 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-17 02:11:20,681 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,681 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,703 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,703 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,843 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,869 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,899 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,932 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-17 02:11:20,934 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-17 02:11:20,934 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-17 02:11:20,935 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-17 02:11:20,936 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (1/1) ... [2021-11-17 02:11:20,942 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-17 02:11:20,951 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-11-17 02:11:20,965 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-17 02:11:21,007 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-17 02:11:21,038 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-17 02:11:21,038 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-11-17 02:11:21,038 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-11-17 02:11:21,038 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-17 02:11:21,039 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-17 02:11:21,039 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-17 02:11:21,039 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-17 02:11:21,039 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-17 02:11:21,039 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-17 02:11:21,039 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-17 02:11:21,039 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-11-17 02:11:21,040 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-11-17 02:11:21,040 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-11-17 02:11:21,040 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-11-17 02:11:21,040 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-11-17 02:11:21,040 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-11-17 02:11:21,040 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-11-17 02:11:21,040 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-11-17 02:11:21,041 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-11-17 02:11:21,041 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-11-17 02:11:21,041 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-17 02:11:21,041 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-17 02:11:21,041 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-11-17 02:11:21,041 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-11-17 02:11:21,042 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-17 02:11:21,042 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-17 02:11:21,042 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-17 02:11:21,042 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-17 02:11:21,042 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-11-17 02:11:21,042 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-11-17 02:11:21,042 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-11-17 02:11:21,043 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-11-17 02:11:21,043 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-11-17 02:11:21,043 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-11-17 02:11:21,043 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-17 02:11:21,043 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-17 02:11:21,043 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-17 02:11:21,044 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-17 02:11:21,044 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-11-17 02:11:21,044 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-11-17 02:11:21,044 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-17 02:11:21,044 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-17 02:11:21,044 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-11-17 02:11:21,044 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-11-17 02:11:21,045 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-11-17 02:11:21,045 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-11-17 02:11:21,045 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-11-17 02:11:21,045 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-11-17 02:11:21,045 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-11-17 02:11:21,045 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-11-17 02:11:21,046 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-11-17 02:11:21,046 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-11-17 02:11:21,046 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-11-17 02:11:21,046 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-11-17 02:11:21,046 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-17 02:11:21,046 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-11-17 02:11:21,046 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-11-17 02:11:21,047 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-11-17 02:11:21,047 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-11-17 02:11:21,047 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-11-17 02:11:21,047 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-11-17 02:11:21,047 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-17 02:11:21,047 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-11-17 02:11:21,048 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-11-17 02:11:21,048 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-11-17 02:11:21,048 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-11-17 02:11:21,048 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-11-17 02:11:21,048 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-11-17 02:11:21,048 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-11-17 02:11:21,048 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-11-17 02:11:21,049 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-11-17 02:11:21,049 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-11-17 02:11:21,049 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-11-17 02:11:21,049 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-11-17 02:11:21,049 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-17 02:11:21,049 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-17 02:11:21,050 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-17 02:11:21,050 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-17 02:11:21,050 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-17 02:11:21,050 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-17 02:11:21,050 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-17 02:11:21,050 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-17 02:11:21,050 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-17 02:11:21,051 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-17 02:11:21,051 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-11-17 02:11:21,051 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-11-17 02:11:21,051 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-11-17 02:11:21,051 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-11-17 02:11:21,051 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-11-17 02:11:21,051 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-11-17 02:11:21,052 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-11-17 02:11:21,052 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-11-17 02:11:21,052 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-11-17 02:11:21,052 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-11-17 02:11:21,052 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-11-17 02:11:21,052 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-11-17 02:11:21,052 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-11-17 02:11:21,053 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-11-17 02:11:21,053 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-11-17 02:11:21,053 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-11-17 02:11:21,053 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-11-17 02:11:21,053 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-11-17 02:11:21,053 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-11-17 02:11:21,054 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-11-17 02:11:21,054 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-17 02:11:21,054 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-17 02:11:21,054 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-11-17 02:11:21,054 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-11-17 02:11:21,054 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-11-17 02:11:21,054 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-11-17 02:11:21,055 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-11-17 02:11:21,055 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-11-17 02:11:21,055 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-11-17 02:11:21,055 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-11-17 02:11:21,055 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-17 02:11:21,055 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-17 02:11:21,056 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-17 02:11:21,056 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-17 02:11:21,056 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-17 02:11:21,056 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-17 02:11:21,056 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-11-17 02:11:21,056 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-11-17 02:11:21,056 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-17 02:11:21,057 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-17 02:11:21,057 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-17 02:11:21,057 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-17 02:11:21,057 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-11-17 02:11:21,057 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-11-17 02:11:21,057 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-11-17 02:11:21,058 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-11-17 02:11:21,058 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-17 02:11:21,058 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-11-17 02:11:21,058 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-11-17 02:11:21,058 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-17 02:11:21,058 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-17 02:11:21,058 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-11-17 02:11:21,059 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-11-17 02:11:21,059 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-17 02:11:21,059 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-17 02:11:21,059 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-17 02:11:21,059 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-11-17 02:11:21,059 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-11-17 02:11:21,059 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-11-17 02:11:21,060 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-11-17 02:11:21,060 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-17 02:11:21,060 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-11-17 02:11:21,060 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-11-17 02:11:21,060 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-11-17 02:11:21,060 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-11-17 02:11:21,060 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-11-17 02:11:21,061 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-11-17 02:11:21,061 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-11-17 02:11:21,061 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-11-17 02:11:21,061 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-11-17 02:11:21,061 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-11-17 02:11:21,061 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-17 02:11:21,061 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-11-17 02:11:21,061 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-11-17 02:11:21,062 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-11-17 02:11:21,062 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-11-17 02:11:21,062 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-11-17 02:11:21,062 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-11-17 02:11:21,062 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-17 02:11:21,062 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-17 02:11:21,062 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-17 02:11:21,063 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-11-17 02:11:21,063 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-11-17 02:11:21,063 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-17 02:11:21,063 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-11-17 02:11:21,063 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-11-17 02:11:21,063 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-17 02:11:21,064 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 02:11:21,064 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-17 02:11:21,064 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-17 02:11:21,064 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-11-17 02:11:21,064 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-11-17 02:11:21,064 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-11-17 02:11:21,064 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-11-17 02:11:21,065 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-11-17 02:11:21,065 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-11-17 02:11:21,065 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-11-17 02:11:21,065 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-11-17 02:11:21,065 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-17 02:11:21,065 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-17 02:11:21,065 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-11-17 02:11:21,065 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-11-17 02:11:21,066 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-11-17 02:11:21,066 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-11-17 02:11:21,066 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-11-17 02:11:21,066 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-11-17 02:11:21,066 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-11-17 02:11:21,066 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-11-17 02:11:21,066 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-11-17 02:11:21,067 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-11-17 02:11:21,067 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-11-17 02:11:21,067 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-11-17 02:11:21,067 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-11-17 02:11:21,067 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-11-17 02:11:21,067 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-11-17 02:11:21,067 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-11-17 02:11:21,068 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2021-11-17 02:11:21,068 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2021-11-17 02:11:21,068 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-11-17 02:11:21,068 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-11-17 02:11:21,068 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-17 02:11:21,068 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-17 02:11:21,068 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-17 02:11:21,069 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-11-17 02:11:21,069 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-11-17 02:11:21,069 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-11-17 02:11:21,069 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-11-17 02:11:21,069 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-17 02:11:21,069 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-17 02:11:21,069 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-11-17 02:11:21,070 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-11-17 02:11:21,070 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-11-17 02:11:21,070 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-11-17 02:11:21,070 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-11-17 02:11:21,070 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-17 02:11:21,070 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-17 02:11:21,741 INFO L236 CfgBuilder]: Building ICFG [2021-11-17 02:11:21,747 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-17 02:11:30,176 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-17 02:11:44,223 INFO L277 CfgBuilder]: Performing block encoding [2021-11-17 02:11:44,238 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-17 02:11:44,239 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-17 02:11:44,241 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:11:44 BoogieIcfgContainer [2021-11-17 02:11:44,242 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-17 02:11:44,243 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-17 02:11:44,243 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-17 02:11:44,245 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-17 02:11:44,246 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 17.11 02:11:18" (1/3) ... [2021-11-17 02:11:44,246 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33a69d02 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 02:11:44, skipping insertion in model container [2021-11-17 02:11:44,246 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.11 02:11:20" (2/3) ... [2021-11-17 02:11:44,247 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@33a69d02 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 17.11 02:11:44, skipping insertion in model container [2021-11-17 02:11:44,247 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:11:44" (3/3) ... [2021-11-17 02:11:44,248 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-17 02:11:44,251 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-17 02:11:44,252 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-17 02:11:44,302 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-17 02:11:44,311 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-17 02:11:44,311 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-17 02:11:44,355 INFO L276 IsEmpty]: Start isEmpty. Operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) [2021-11-17 02:11:44,368 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-17 02:11:44,368 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:44,368 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:44,369 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:44,373 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:44,374 INFO L85 PathProgramCache]: Analyzing trace with hash -1113157247, now seen corresponding path program 1 times [2021-11-17 02:11:44,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:11:44,387 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2110509298] [2021-11-17 02:11:44,388 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:11:44,388 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:11:44,389 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:11:44,399 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:11:44,405 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-17 02:11:45,043 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:11:45,066 INFO L263 TraceCheckSpWp]: Trace formula consists of 845 conjuncts, 1 conjunts are in the unsatisfiable core [2021-11-17 02:11:45,074 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:11:45,478 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2021-11-17 02:11:45,478 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:11:45,867 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2021-11-17 02:11:45,868 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:11:45,868 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2110509298] [2021-11-17 02:11:45,869 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2110509298] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-17 02:11:45,869 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:11:45,869 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [2] total 2 [2021-11-17 02:11:45,870 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2007107959] [2021-11-17 02:11:45,871 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:11:45,875 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-17 02:11:45,876 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:11:45,908 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-17 02:11:45,909 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-17 02:11:45,914 INFO L87 Difference]: Start difference. First operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) Second operand has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 02:11:46,067 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:11:46,067 INFO L93 Difference]: Finished difference Result 3167 states and 4665 transitions. [2021-11-17 02:11:46,068 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-17 02:11:46,069 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 114 [2021-11-17 02:11:46,070 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:11:46,095 INFO L225 Difference]: With dead ends: 3167 [2021-11-17 02:11:46,096 INFO L226 Difference]: Without dead ends: 1570 [2021-11-17 02:11:46,109 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 226 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-17 02:11:46,111 INFO L933 BasicCegarLoop]: 2298 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2298 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:11:46,116 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2298 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:11:46,133 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2021-11-17 02:11:46,250 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 1570. [2021-11-17 02:11:46,254 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1570 states, 1102 states have (on average 1.3874773139745917) internal successors, (1529), 1157 states have internal predecessors, (1529), 375 states have call successors, (375), 93 states have call predecessors, (375), 92 states have return successors, (371), 345 states have call predecessors, (371), 371 states have call successors, (371) [2021-11-17 02:11:46,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1570 states to 1570 states and 2275 transitions. [2021-11-17 02:11:46,266 INFO L78 Accepts]: Start accepts. Automaton has 1570 states and 2275 transitions. Word has length 114 [2021-11-17 02:11:46,266 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:11:46,266 INFO L470 AbstractCegarLoop]: Abstraction has 1570 states and 2275 transitions. [2021-11-17 02:11:46,267 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-17 02:11:46,267 INFO L276 IsEmpty]: Start isEmpty. Operand 1570 states and 2275 transitions. [2021-11-17 02:11:46,276 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-17 02:11:46,276 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:46,276 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:46,294 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (2)] Ended with exit code 0 [2021-11-17 02:11:46,483 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:11:46,484 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:46,484 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:46,484 INFO L85 PathProgramCache]: Analyzing trace with hash 981574537, now seen corresponding path program 1 times [2021-11-17 02:11:46,486 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:11:46,486 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [697061641] [2021-11-17 02:11:46,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:11:46,486 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:11:46,486 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:11:46,488 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:11:46,490 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-17 02:11:47,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:11:47,081 INFO L263 TraceCheckSpWp]: Trace formula consists of 845 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-17 02:11:47,085 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:11:47,455 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-11-17 02:11:47,455 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:11:48,105 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-11-17 02:11:48,105 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:11:48,105 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [697061641] [2021-11-17 02:11:48,106 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [697061641] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-17 02:11:48,106 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:11:48,106 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 9 [2021-11-17 02:11:48,106 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1157984726] [2021-11-17 02:11:48,106 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:11:48,107 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-17 02:11:48,108 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:11:48,108 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-17 02:11:48,109 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-17 02:11:48,109 INFO L87 Difference]: Start difference. First operand 1570 states and 2275 transitions. Second operand has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-17 02:11:48,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:11:48,521 INFO L93 Difference]: Finished difference Result 3134 states and 4545 transitions. [2021-11-17 02:11:48,523 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 02:11:48,523 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 114 [2021-11-17 02:11:48,524 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:11:48,534 INFO L225 Difference]: With dead ends: 3134 [2021-11-17 02:11:48,534 INFO L226 Difference]: Without dead ends: 1573 [2021-11-17 02:11:48,540 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 219 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2021-11-17 02:11:48,541 INFO L933 BasicCegarLoop]: 2266 mSDtfsCounter, 6 mSDsluCounter, 9050 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11316 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:11:48,542 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11316 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 02:11:48,544 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1573 states. [2021-11-17 02:11:48,580 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1573 to 1573. [2021-11-17 02:11:48,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1573 states, 1104 states have (on average 1.3876811594202898) internal successors, (1532), 1160 states have internal predecessors, (1532), 375 states have call successors, (375), 93 states have call predecessors, (375), 93 states have return successors, (375), 345 states have call predecessors, (375), 371 states have call successors, (375) [2021-11-17 02:11:48,592 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1573 states to 1573 states and 2282 transitions. [2021-11-17 02:11:48,593 INFO L78 Accepts]: Start accepts. Automaton has 1573 states and 2282 transitions. Word has length 114 [2021-11-17 02:11:48,593 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:11:48,594 INFO L470 AbstractCegarLoop]: Abstraction has 1573 states and 2282 transitions. [2021-11-17 02:11:48,594 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-17 02:11:48,594 INFO L276 IsEmpty]: Start isEmpty. Operand 1573 states and 2282 transitions. [2021-11-17 02:11:48,597 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-17 02:11:48,597 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:48,598 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:48,618 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-11-17 02:11:48,811 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:11:48,812 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:48,812 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:48,812 INFO L85 PathProgramCache]: Analyzing trace with hash -1593780675, now seen corresponding path program 1 times [2021-11-17 02:11:48,813 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:11:48,813 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [934806499] [2021-11-17 02:11:48,813 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:11:48,813 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:11:48,814 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:11:48,814 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:11:48,815 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-17 02:11:49,348 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:11:49,368 INFO L263 TraceCheckSpWp]: Trace formula consists of 855 conjuncts, 6 conjunts are in the unsatisfiable core [2021-11-17 02:11:49,392 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:11:49,753 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-11-17 02:11:49,753 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:11:50,451 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 02:11:50,451 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:11:50,451 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [934806499] [2021-11-17 02:11:50,451 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [934806499] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:11:50,451 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 02:11:50,451 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2021-11-17 02:11:50,451 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1685563965] [2021-11-17 02:11:50,452 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 02:11:50,452 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-17 02:11:50,453 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:11:50,453 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-17 02:11:50,453 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2021-11-17 02:11:50,454 INFO L87 Difference]: Start difference. First operand 1573 states and 2282 transitions. Second operand has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:11:51,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:11:51,227 INFO L93 Difference]: Finished difference Result 3140 states and 4559 transitions. [2021-11-17 02:11:51,230 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-17 02:11:51,230 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 116 [2021-11-17 02:11:51,231 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:11:51,241 INFO L225 Difference]: With dead ends: 3140 [2021-11-17 02:11:51,241 INFO L226 Difference]: Without dead ends: 1576 [2021-11-17 02:11:51,247 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 221 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 0.4s TimeCoverageRelationStatistics Valid=46, Invalid=136, Unknown=0, NotChecked=0, Total=182 [2021-11-17 02:11:51,250 INFO L933 BasicCegarLoop]: 2267 mSDtfsCounter, 11 mSDsluCounter, 13573 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 15840 SdHoareTripleChecker+Invalid, 124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.6s IncrementalHoareTripleChecker+Time [2021-11-17 02:11:51,250 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 15840 Invalid, 124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 0.6s Time] [2021-11-17 02:11:51,253 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1576 states. [2021-11-17 02:11:51,283 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1576 to 1574. [2021-11-17 02:11:51,286 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1574 states, 1105 states have (on average 1.388235294117647) internal successors, (1534), 1161 states have internal predecessors, (1534), 375 states have call successors, (375), 93 states have call predecessors, (375), 93 states have return successors, (375), 345 states have call predecessors, (375), 371 states have call successors, (375) [2021-11-17 02:11:51,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1574 states to 1574 states and 2284 transitions. [2021-11-17 02:11:51,296 INFO L78 Accepts]: Start accepts. Automaton has 1574 states and 2284 transitions. Word has length 116 [2021-11-17 02:11:51,297 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:11:51,297 INFO L470 AbstractCegarLoop]: Abstraction has 1574 states and 2284 transitions. [2021-11-17 02:11:51,297 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:11:51,298 INFO L276 IsEmpty]: Start isEmpty. Operand 1574 states and 2284 transitions. [2021-11-17 02:11:51,300 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-11-17 02:11:51,300 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:51,300 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:51,325 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-17 02:11:51,520 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:11:51,520 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:51,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:51,521 INFO L85 PathProgramCache]: Analyzing trace with hash 1401967625, now seen corresponding path program 2 times [2021-11-17 02:11:51,522 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:11:51,522 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [237103413] [2021-11-17 02:11:51,522 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 02:11:51,522 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:11:51,522 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:11:51,523 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:11:51,542 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-17 02:11:52,022 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 02:11:52,022 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 02:11:52,041 INFO L263 TraceCheckSpWp]: Trace formula consists of 675 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:11:52,044 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:11:52,626 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-11-17 02:11:52,627 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:11:52,976 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-11-17 02:11:52,977 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:11:52,977 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [237103413] [2021-11-17 02:11:52,977 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [237103413] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:11:52,977 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:11:52,977 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:11:52,978 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [831351488] [2021-11-17 02:11:52,978 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:11:52,978 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:11:52,978 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:11:52,979 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:11:52,979 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:11:52,979 INFO L87 Difference]: Start difference. First operand 1574 states and 2284 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:11:53,118 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:11:53,118 INFO L93 Difference]: Finished difference Result 4669 states and 6925 transitions. [2021-11-17 02:11:53,119 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:11:53,119 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 118 [2021-11-17 02:11:53,119 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:11:53,158 INFO L225 Difference]: With dead ends: 4669 [2021-11-17 02:11:53,159 INFO L226 Difference]: Without dead ends: 3118 [2021-11-17 02:11:53,165 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 234 GetRequests, 233 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:11:53,166 INFO L933 BasicCegarLoop]: 2892 mSDtfsCounter, 2205 mSDsluCounter, 2266 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2205 SdHoareTripleChecker+Valid, 5158 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:11:53,167 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2205 Valid, 5158 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:11:53,170 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3118 states. [2021-11-17 02:11:53,242 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3118 to 3112. [2021-11-17 02:11:53,248 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3112 states, 2188 states have (on average 1.3889396709323583) internal successors, (3039), 2296 states have internal predecessors, (3039), 739 states have call successors, (739), 184 states have call predecessors, (739), 184 states have return successors, (774), 683 states have call predecessors, (774), 735 states have call successors, (774) [2021-11-17 02:11:53,263 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3112 states to 3112 states and 4552 transitions. [2021-11-17 02:11:53,264 INFO L78 Accepts]: Start accepts. Automaton has 3112 states and 4552 transitions. Word has length 118 [2021-11-17 02:11:53,264 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:11:53,264 INFO L470 AbstractCegarLoop]: Abstraction has 3112 states and 4552 transitions. [2021-11-17 02:11:53,264 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:11:53,265 INFO L276 IsEmpty]: Start isEmpty. Operand 3112 states and 4552 transitions. [2021-11-17 02:11:53,267 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2021-11-17 02:11:53,267 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:53,267 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:53,287 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (5)] Ended with exit code 0 [2021-11-17 02:11:53,484 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:11:53,484 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:53,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:53,485 INFO L85 PathProgramCache]: Analyzing trace with hash 510774303, now seen corresponding path program 1 times [2021-11-17 02:11:53,486 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:11:53,486 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1272294120] [2021-11-17 02:11:53,486 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:11:53,486 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:11:53,486 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:11:53,487 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:11:53,488 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-17 02:11:54,005 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:11:54,026 INFO L263 TraceCheckSpWp]: Trace formula consists of 866 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-17 02:11:54,029 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:11:54,381 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-17 02:11:54,381 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:11:55,257 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-11-17 02:11:55,257 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:11:55,258 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1272294120] [2021-11-17 02:11:55,258 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1272294120] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:11:55,258 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 02:11:55,258 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2021-11-17 02:11:55,258 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2128036723] [2021-11-17 02:11:55,258 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 02:11:55,259 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-17 02:11:55,259 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:11:55,259 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-17 02:11:55,260 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-11-17 02:11:55,260 INFO L87 Difference]: Start difference. First operand 3112 states and 4552 transitions. Second operand has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:11:56,311 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:11:56,313 INFO L93 Difference]: Finished difference Result 6229 states and 9125 transitions. [2021-11-17 02:11:56,315 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-17 02:11:56,315 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 119 [2021-11-17 02:11:56,316 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:11:56,336 INFO L225 Difference]: With dead ends: 6229 [2021-11-17 02:11:56,336 INFO L226 Difference]: Without dead ends: 3126 [2021-11-17 02:11:56,352 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2021-11-17 02:11:56,353 INFO L933 BasicCegarLoop]: 2268 mSDtfsCounter, 17 mSDsluCounter, 15842 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 18110 SdHoareTripleChecker+Invalid, 192 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-17 02:11:56,354 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [19 Valid, 18110 Invalid, 192 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-17 02:11:56,358 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3126 states. [2021-11-17 02:11:56,456 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3126 to 3113. [2021-11-17 02:11:56,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3113 states, 2189 states have (on average 1.3892188213796255) internal successors, (3041), 2297 states have internal predecessors, (3041), 739 states have call successors, (739), 184 states have call predecessors, (739), 184 states have return successors, (774), 683 states have call predecessors, (774), 735 states have call successors, (774) [2021-11-17 02:11:56,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3113 states to 3113 states and 4554 transitions. [2021-11-17 02:11:56,484 INFO L78 Accepts]: Start accepts. Automaton has 3113 states and 4554 transitions. Word has length 119 [2021-11-17 02:11:56,484 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:11:56,484 INFO L470 AbstractCegarLoop]: Abstraction has 3113 states and 4554 transitions. [2021-11-17 02:11:56,484 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:11:56,485 INFO L276 IsEmpty]: Start isEmpty. Operand 3113 states and 4554 transitions. [2021-11-17 02:11:56,487 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-11-17 02:11:56,487 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:56,488 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:56,513 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-17 02:11:56,705 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:11:56,705 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:56,706 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:56,706 INFO L85 PathProgramCache]: Analyzing trace with hash -639996693, now seen corresponding path program 2 times [2021-11-17 02:11:56,708 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:11:56,708 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1872294420] [2021-11-17 02:11:56,708 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 02:11:56,708 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:11:56,708 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:11:56,710 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:11:56,711 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-17 02:11:57,140 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 02:11:57,140 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 02:11:57,154 INFO L263 TraceCheckSpWp]: Trace formula consists of 676 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:11:57,156 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:11:57,686 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-11-17 02:11:57,686 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:11:57,989 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-11-17 02:11:57,990 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:11:57,990 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1872294420] [2021-11-17 02:11:57,990 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1872294420] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:11:57,990 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:11:57,990 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:11:57,990 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049400849] [2021-11-17 02:11:57,990 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:11:57,991 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:11:57,991 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:11:57,991 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:11:57,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:11:57,991 INFO L87 Difference]: Start difference. First operand 3113 states and 4554 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:11:58,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:11:58,159 INFO L93 Difference]: Finished difference Result 8928 states and 13306 transitions. [2021-11-17 02:11:58,160 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:11:58,160 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 121 [2021-11-17 02:11:58,161 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:11:58,220 INFO L225 Difference]: With dead ends: 8928 [2021-11-17 02:11:58,221 INFO L226 Difference]: Without dead ends: 5838 [2021-11-17 02:11:58,236 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 239 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:11:58,239 INFO L933 BasicCegarLoop]: 2602 mSDtfsCounter, 1949 mSDsluCounter, 2236 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1949 SdHoareTripleChecker+Valid, 4838 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:11:58,239 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1949 Valid, 4838 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:11:58,244 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5838 states. [2021-11-17 02:11:58,430 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5838 to 5826. [2021-11-17 02:11:58,452 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5826 states, 4098 states have (on average 1.395070766227428) internal successors, (5717), 4308 states have internal predecessors, (5717), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-11-17 02:11:58,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5826 states to 5826 states and 8539 transitions. [2021-11-17 02:11:58,486 INFO L78 Accepts]: Start accepts. Automaton has 5826 states and 8539 transitions. Word has length 121 [2021-11-17 02:11:58,487 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:11:58,487 INFO L470 AbstractCegarLoop]: Abstraction has 5826 states and 8539 transitions. [2021-11-17 02:11:58,488 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:11:58,488 INFO L276 IsEmpty]: Start isEmpty. Operand 5826 states and 8539 transitions. [2021-11-17 02:11:58,490 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2021-11-17 02:11:58,491 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:11:58,491 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:11:58,511 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (7)] Forceful destruction successful, exit code 0 [2021-11-17 02:11:58,708 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:11:58,708 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:11:58,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:11:58,709 INFO L85 PathProgramCache]: Analyzing trace with hash 1634394752, now seen corresponding path program 1 times [2021-11-17 02:11:58,709 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:11:58,709 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1312723831] [2021-11-17 02:11:58,709 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:11:58,710 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:11:58,710 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:11:58,711 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:11:58,711 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-17 02:11:59,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:11:59,238 INFO L263 TraceCheckSpWp]: Trace formula consists of 877 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-17 02:11:59,241 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:11:59,660 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 24 proven. 6 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-11-17 02:11:59,660 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:00,675 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-11-17 02:12:00,676 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:00,676 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1312723831] [2021-11-17 02:12:00,676 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1312723831] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-17 02:12:00,676 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-17 02:12:00,676 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2021-11-17 02:12:00,677 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2126497137] [2021-11-17 02:12:00,677 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-17 02:12:00,677 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 02:12:00,677 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:00,678 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 02:12:00,678 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2021-11-17 02:12:00,678 INFO L87 Difference]: Start difference. First operand 5826 states and 8539 transitions. Second operand has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:12:02,255 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:02,255 INFO L93 Difference]: Finished difference Result 11686 states and 17167 transitions. [2021-11-17 02:12:02,256 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-17 02:12:02,257 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 122 [2021-11-17 02:12:02,257 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:02,291 INFO L225 Difference]: With dead ends: 11686 [2021-11-17 02:12:02,291 INFO L226 Difference]: Without dead ends: 5869 [2021-11-17 02:12:02,313 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 247 GetRequests, 229 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 0.7s TimeCoverageRelationStatistics Valid=83, Invalid=297, Unknown=0, NotChecked=0, Total=380 [2021-11-17 02:12:02,314 INFO L933 BasicCegarLoop]: 2269 mSDtfsCounter, 26 mSDsluCounter, 20375 mSDsCounter, 0 mSdLazyCounter, 285 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 22644 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:02,314 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 22644 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 285 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2021-11-17 02:12:02,320 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5869 states. [2021-11-17 02:12:02,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5869 to 5827. [2021-11-17 02:12:02,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5827 states, 4099 states have (on average 1.3952183459380336) internal successors, (5719), 4309 states have internal predecessors, (5719), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-11-17 02:12:02,531 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5827 states to 5827 states and 8541 transitions. [2021-11-17 02:12:02,534 INFO L78 Accepts]: Start accepts. Automaton has 5827 states and 8541 transitions. Word has length 122 [2021-11-17 02:12:02,534 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:02,534 INFO L470 AbstractCegarLoop]: Abstraction has 5827 states and 8541 transitions. [2021-11-17 02:12:02,534 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-17 02:12:02,534 INFO L276 IsEmpty]: Start isEmpty. Operand 5827 states and 8541 transitions. [2021-11-17 02:12:02,538 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-11-17 02:12:02,538 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:02,538 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:02,561 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (8)] Ended with exit code 0 [2021-11-17 02:12:02,758 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:02,759 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:02,759 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:02,759 INFO L85 PathProgramCache]: Analyzing trace with hash -1590994356, now seen corresponding path program 2 times [2021-11-17 02:12:02,760 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:02,760 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1966863771] [2021-11-17 02:12:02,760 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-17 02:12:02,760 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:02,760 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:02,761 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:02,762 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-17 02:12:03,213 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-17 02:12:03,214 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-17 02:12:03,228 INFO L263 TraceCheckSpWp]: Trace formula consists of 677 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:12:03,230 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:03,789 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:12:03,789 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:04,098 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:12:04,098 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:04,098 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1966863771] [2021-11-17 02:12:04,099 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1966863771] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:04,099 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:04,099 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:12:04,099 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1849932971] [2021-11-17 02:12:04,099 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:04,099 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:12:04,100 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:04,100 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:12:04,100 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:12:04,100 INFO L87 Difference]: Start difference. First operand 5827 states and 8541 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:12:04,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:04,206 INFO L93 Difference]: Finished difference Result 5829 states and 8542 transitions. [2021-11-17 02:12:04,207 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:12:04,207 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 124 [2021-11-17 02:12:04,207 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:04,242 INFO L225 Difference]: With dead ends: 5829 [2021-11-17 02:12:04,242 INFO L226 Difference]: Without dead ends: 5826 [2021-11-17 02:12:04,246 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 246 GetRequests, 245 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:12:04,247 INFO L933 BasicCegarLoop]: 2272 mSDtfsCounter, 2206 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2206 SdHoareTripleChecker+Valid, 2272 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:04,247 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2206 Valid, 2272 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:12:04,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5826 states. [2021-11-17 02:12:04,451 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5826 to 5826. [2021-11-17 02:12:04,461 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5826 states, 4099 states have (on average 1.3949743839960966) internal successors, (5718), 4308 states have internal predecessors, (5718), 1376 states have call successors, (1376), 350 states have call predecessors, (1376), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-11-17 02:12:04,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5826 states to 5826 states and 8539 transitions. [2021-11-17 02:12:04,487 INFO L78 Accepts]: Start accepts. Automaton has 5826 states and 8539 transitions. Word has length 124 [2021-11-17 02:12:04,488 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:04,488 INFO L470 AbstractCegarLoop]: Abstraction has 5826 states and 8539 transitions. [2021-11-17 02:12:04,488 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:12:04,488 INFO L276 IsEmpty]: Start isEmpty. Operand 5826 states and 8539 transitions. [2021-11-17 02:12:04,491 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2021-11-17 02:12:04,491 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:04,491 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:04,509 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:04,708 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:04,708 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:04,709 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:04,709 INFO L85 PathProgramCache]: Analyzing trace with hash -2076724158, now seen corresponding path program 1 times [2021-11-17 02:12:04,710 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:04,710 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1138927086] [2021-11-17 02:12:04,710 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:04,710 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:04,710 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:04,711 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:04,712 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-17 02:12:05,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:05,309 INFO L263 TraceCheckSpWp]: Trace formula consists of 888 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:12:05,311 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:05,935 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:12:05,936 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:06,278 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-17 02:12:06,279 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:06,279 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1138927086] [2021-11-17 02:12:06,279 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1138927086] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:06,279 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:06,279 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-17 02:12:06,279 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1690777405] [2021-11-17 02:12:06,280 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:06,280 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:12:06,280 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:06,281 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:12:06,281 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:12:06,281 INFO L87 Difference]: Start difference. First operand 5826 states and 8539 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:12:06,384 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:06,384 INFO L93 Difference]: Finished difference Result 5828 states and 8540 transitions. [2021-11-17 02:12:06,384 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:12:06,385 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 125 [2021-11-17 02:12:06,385 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:06,413 INFO L225 Difference]: With dead ends: 5828 [2021-11-17 02:12:06,414 INFO L226 Difference]: Without dead ends: 5796 [2021-11-17 02:12:06,417 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 248 GetRequests, 247 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:12:06,418 INFO L933 BasicCegarLoop]: 2271 mSDtfsCounter, 2203 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2203 SdHoareTripleChecker+Valid, 2271 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:06,418 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2203 Valid, 2271 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-17 02:12:06,424 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5796 states. [2021-11-17 02:12:06,614 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5796 to 5796. [2021-11-17 02:12:06,623 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5796 states, 4083 states have (on average 1.3955424932647562) internal successors, (5698), 4291 states have internal predecessors, (5698), 1363 states have call successors, (1363), 349 states have call predecessors, (1363), 349 states have return successors, (1433), 1257 states have call predecessors, (1433), 1361 states have call successors, (1433) [2021-11-17 02:12:06,650 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5796 states to 5796 states and 8494 transitions. [2021-11-17 02:12:06,651 INFO L78 Accepts]: Start accepts. Automaton has 5796 states and 8494 transitions. Word has length 125 [2021-11-17 02:12:06,651 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:06,651 INFO L470 AbstractCegarLoop]: Abstraction has 5796 states and 8494 transitions. [2021-11-17 02:12:06,652 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:12:06,652 INFO L276 IsEmpty]: Start isEmpty. Operand 5796 states and 8494 transitions. [2021-11-17 02:12:06,661 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 178 [2021-11-17 02:12:06,661 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:06,661 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:06,683 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:06,875 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:06,875 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:06,876 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:06,876 INFO L85 PathProgramCache]: Analyzing trace with hash -104625019, now seen corresponding path program 1 times [2021-11-17 02:12:06,877 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:06,877 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [108005737] [2021-11-17 02:12:06,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:06,877 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:06,877 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:06,878 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:06,879 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-17 02:12:07,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:07,595 INFO L263 TraceCheckSpWp]: Trace formula consists of 1107 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:12:07,598 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:07,924 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-11-17 02:12:07,924 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:08,275 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-11-17 02:12:08,276 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:08,276 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [108005737] [2021-11-17 02:12:08,276 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [108005737] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:08,276 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:08,276 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-17 02:12:08,276 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [555827607] [2021-11-17 02:12:08,276 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:08,277 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-17 02:12:08,277 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:08,277 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-17 02:12:08,277 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:12:08,277 INFO L87 Difference]: Start difference. First operand 5796 states and 8494 transitions. Second operand has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-17 02:12:08,737 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:08,737 INFO L93 Difference]: Finished difference Result 16733 states and 24520 transitions. [2021-11-17 02:12:08,738 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:12:08,738 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 177 [2021-11-17 02:12:08,738 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:08,795 INFO L225 Difference]: With dead ends: 16733 [2021-11-17 02:12:08,795 INFO L226 Difference]: Without dead ends: 10960 [2021-11-17 02:12:08,825 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 351 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-17 02:12:08,826 INFO L933 BasicCegarLoop]: 2693 mSDtfsCounter, 1929 mSDsluCounter, 2184 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1929 SdHoareTripleChecker+Valid, 4877 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:08,826 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1929 Valid, 4877 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-17 02:12:08,840 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10960 states. [2021-11-17 02:12:09,228 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10960 to 10936. [2021-11-17 02:12:09,243 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10936 states, 7699 states have (on average 1.3983634238212754) internal successors, (10766), 8111 states have internal predecessors, (10766), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 677 states have return successors, (2695), 2349 states have call predecessors, (2695), 2557 states have call successors, (2695) [2021-11-17 02:12:09,282 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10936 states to 10936 states and 16020 transitions. [2021-11-17 02:12:09,285 INFO L78 Accepts]: Start accepts. Automaton has 10936 states and 16020 transitions. Word has length 177 [2021-11-17 02:12:09,286 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:09,286 INFO L470 AbstractCegarLoop]: Abstraction has 10936 states and 16020 transitions. [2021-11-17 02:12:09,286 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-17 02:12:09,286 INFO L276 IsEmpty]: Start isEmpty. Operand 10936 states and 16020 transitions. [2021-11-17 02:12:09,305 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2021-11-17 02:12:09,305 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:09,305 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:09,332 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (11)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:09,519 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:09,519 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:09,520 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:09,520 INFO L85 PathProgramCache]: Analyzing trace with hash 1302458743, now seen corresponding path program 1 times [2021-11-17 02:12:09,521 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:09,521 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [203009155] [2021-11-17 02:12:09,521 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:09,521 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:09,521 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:09,522 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:09,523 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-17 02:12:10,256 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:10,298 INFO L263 TraceCheckSpWp]: Trace formula consists of 1246 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-17 02:12:10,302 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:10,657 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 211 trivial. 0 not checked. [2021-11-17 02:12:10,658 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:11,042 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 211 trivial. 0 not checked. [2021-11-17 02:12:11,042 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:11,042 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [203009155] [2021-11-17 02:12:11,043 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [203009155] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:11,043 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:11,043 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2021-11-17 02:12:11,043 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [357475437] [2021-11-17 02:12:11,043 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:11,044 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:12:11,044 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:11,044 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:12:11,045 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:12:11,045 INFO L87 Difference]: Start difference. First operand 10936 states and 16020 transitions. Second operand has 4 states, 4 states have (on average 28.75) internal successors, (115), 4 states have internal predecessors, (115), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 02:12:12,285 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:12,285 INFO L93 Difference]: Finished difference Result 24204 states and 35880 transitions. [2021-11-17 02:12:12,286 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 02:12:12,286 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 28.75) internal successors, (115), 4 states have internal predecessors, (115), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 216 [2021-11-17 02:12:12,287 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:12,360 INFO L225 Difference]: With dead ends: 24204 [2021-11-17 02:12:12,361 INFO L226 Difference]: Without dead ends: 13291 [2021-11-17 02:12:12,405 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 432 GetRequests, 429 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-17 02:12:12,406 INFO L933 BasicCegarLoop]: 2600 mSDtfsCounter, 3048 mSDsluCounter, 2332 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 180 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3048 SdHoareTripleChecker+Valid, 4932 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.8s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:12,406 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3048 Valid, 4932 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 0.8s Time] [2021-11-17 02:12:12,423 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13291 states. [2021-11-17 02:12:12,940 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13291 to 10950. [2021-11-17 02:12:12,956 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10950 states, 7713 states have (on average 1.3976403474653183) internal successors, (10780), 8125 states have internal predecessors, (10780), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 677 states have return successors, (2695), 2349 states have call predecessors, (2695), 2557 states have call successors, (2695) [2021-11-17 02:12:12,999 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10950 states to 10950 states and 16034 transitions. [2021-11-17 02:12:13,004 INFO L78 Accepts]: Start accepts. Automaton has 10950 states and 16034 transitions. Word has length 216 [2021-11-17 02:12:13,004 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:13,004 INFO L470 AbstractCegarLoop]: Abstraction has 10950 states and 16034 transitions. [2021-11-17 02:12:13,005 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 28.75) internal successors, (115), 4 states have internal predecessors, (115), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-17 02:12:13,005 INFO L276 IsEmpty]: Start isEmpty. Operand 10950 states and 16034 transitions. [2021-11-17 02:12:13,023 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 234 [2021-11-17 02:12:13,023 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:13,026 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:13,055 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:13,238 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:13,238 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:13,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:13,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1556541598, now seen corresponding path program 1 times [2021-11-17 02:12:13,240 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:13,240 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [247031738] [2021-11-17 02:12:13,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:13,240 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:13,240 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:13,241 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:13,242 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-17 02:12:13,990 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:14,034 INFO L263 TraceCheckSpWp]: Trace formula consists of 1293 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-17 02:12:14,038 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:14,462 INFO L134 CoverageAnalysis]: Checked inductivity of 301 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 276 trivial. 0 not checked. [2021-11-17 02:12:14,462 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:15,005 INFO L134 CoverageAnalysis]: Checked inductivity of 301 backedges. 21 proven. 2 refuted. 0 times theorem prover too weak. 278 trivial. 0 not checked. [2021-11-17 02:12:15,005 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:15,005 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [247031738] [2021-11-17 02:12:15,006 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [247031738] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-17 02:12:15,006 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-17 02:12:15,006 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2021-11-17 02:12:15,006 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [343997395] [2021-11-17 02:12:15,006 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:15,007 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 02:12:15,007 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:15,007 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 02:12:15,008 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:12:15,008 INFO L87 Difference]: Start difference. First operand 10950 states and 16034 transitions. Second operand has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:12:15,779 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:15,779 INFO L93 Difference]: Finished difference Result 16645 states and 24385 transitions. [2021-11-17 02:12:15,780 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 02:12:15,781 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 233 [2021-11-17 02:12:15,781 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:15,846 INFO L225 Difference]: With dead ends: 16645 [2021-11-17 02:12:15,846 INFO L226 Difference]: Without dead ends: 10986 [2021-11-17 02:12:15,874 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 465 GetRequests, 458 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2021-11-17 02:12:15,875 INFO L933 BasicCegarLoop]: 2271 mSDtfsCounter, 1 mSDsluCounter, 6803 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9074 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.3s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:15,876 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9074 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.3s Time] [2021-11-17 02:12:15,887 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10986 states. [2021-11-17 02:12:16,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10986 to 10966. [2021-11-17 02:12:16,389 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10966 states, 7725 states have (on average 1.3970226537216828) internal successors, (10792), 8137 states have internal predecessors, (10792), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 681 states have return successors, (2713), 2353 states have call predecessors, (2713), 2557 states have call successors, (2713) [2021-11-17 02:12:16,437 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10966 states to 10966 states and 16064 transitions. [2021-11-17 02:12:16,441 INFO L78 Accepts]: Start accepts. Automaton has 10966 states and 16064 transitions. Word has length 233 [2021-11-17 02:12:16,442 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:16,442 INFO L470 AbstractCegarLoop]: Abstraction has 10966 states and 16064 transitions. [2021-11-17 02:12:16,442 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-17 02:12:16,442 INFO L276 IsEmpty]: Start isEmpty. Operand 10966 states and 16064 transitions. [2021-11-17 02:12:16,462 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 240 [2021-11-17 02:12:16,462 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:16,463 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:16,490 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:16,691 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:16,691 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:16,692 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:16,692 INFO L85 PathProgramCache]: Analyzing trace with hash -2024074724, now seen corresponding path program 1 times [2021-11-17 02:12:16,693 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:16,693 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [410013662] [2021-11-17 02:12:16,693 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:16,693 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:16,694 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:16,695 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:16,697 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-17 02:12:17,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:17,774 INFO L263 TraceCheckSpWp]: Trace formula consists of 1308 conjuncts, 17 conjunts are in the unsatisfiable core [2021-11-17 02:12:17,779 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:18,500 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-11-17 02:12:18,500 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:19,831 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-11-17 02:12:19,831 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:19,832 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [410013662] [2021-11-17 02:12:19,832 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [410013662] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:19,832 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:19,832 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9, 9] imperfect sequences [] total 15 [2021-11-17 02:12:19,833 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [58172744] [2021-11-17 02:12:19,833 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:19,833 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-17 02:12:19,833 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:19,834 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-17 02:12:19,834 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=176, Unknown=0, NotChecked=0, Total=210 [2021-11-17 02:12:19,834 INFO L87 Difference]: Start difference. First operand 10966 states and 16064 transitions. Second operand has 15 states, 13 states have (on average 8.923076923076923) internal successors, (116), 11 states have internal predecessors, (116), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) [2021-11-17 02:12:20,916 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:20,916 INFO L93 Difference]: Finished difference Result 15259 states and 22543 transitions. [2021-11-17 02:12:20,917 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-17 02:12:20,917 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 8.923076923076923) internal successors, (116), 11 states have internal predecessors, (116), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) Word has length 239 [2021-11-17 02:12:20,917 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:21,013 INFO L225 Difference]: With dead ends: 15259 [2021-11-17 02:12:21,013 INFO L226 Difference]: Without dead ends: 12423 [2021-11-17 02:12:21,034 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 477 GetRequests, 463 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2021-11-17 02:12:21,035 INFO L933 BasicCegarLoop]: 2957 mSDtfsCounter, 994 mSDsluCounter, 28966 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 122 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1116 SdHoareTripleChecker+Valid, 31923 SdHoareTripleChecker+Invalid, 253 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 122 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.7s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:21,035 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1116 Valid, 31923 Invalid, 253 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [122 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 0.7s Time] [2021-11-17 02:12:21,047 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12423 states. [2021-11-17 02:12:21,550 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12423 to 10984. [2021-11-17 02:12:21,569 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10984 states, 7735 states have (on average 1.3965093729799611) internal successors, (10802), 8151 states have internal predecessors, (10802), 2561 states have call successors, (2561), 677 states have call predecessors, (2561), 687 states have return successors, (2727), 2357 states have call predecessors, (2727), 2559 states have call successors, (2727) [2021-11-17 02:12:21,618 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10984 states to 10984 states and 16090 transitions. [2021-11-17 02:12:21,620 INFO L78 Accepts]: Start accepts. Automaton has 10984 states and 16090 transitions. Word has length 239 [2021-11-17 02:12:21,621 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:21,621 INFO L470 AbstractCegarLoop]: Abstraction has 10984 states and 16090 transitions. [2021-11-17 02:12:21,621 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 8.923076923076923) internal successors, (116), 11 states have internal predecessors, (116), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) [2021-11-17 02:12:21,622 INFO L276 IsEmpty]: Start isEmpty. Operand 10984 states and 16090 transitions. [2021-11-17 02:12:21,640 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2021-11-17 02:12:21,640 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:21,641 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:21,675 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:21,855 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:21,855 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:21,856 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:21,856 INFO L85 PathProgramCache]: Analyzing trace with hash 1952403498, now seen corresponding path program 1 times [2021-11-17 02:12:21,857 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:21,857 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [230712498] [2021-11-17 02:12:21,858 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:21,858 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:21,858 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:21,859 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:21,861 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-17 02:12:22,922 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:22,968 INFO L263 TraceCheckSpWp]: Trace formula consists of 1308 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 02:12:22,972 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:23,360 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2021-11-17 02:12:23,361 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:23,812 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2021-11-17 02:12:23,813 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:23,813 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [230712498] [2021-11-17 02:12:23,813 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [230712498] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:23,813 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:23,813 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2021-11-17 02:12:23,813 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [323138077] [2021-11-17 02:12:23,813 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:23,814 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-17 02:12:23,814 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:23,814 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-17 02:12:23,814 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-17 02:12:23,814 INFO L87 Difference]: Start difference. First operand 10984 states and 16090 transitions. Second operand has 8 states, 8 states have (on average 14.125) internal successors, (113), 8 states have internal predecessors, (113), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-17 02:12:25,855 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:12:27,854 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.00s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:12:36,156 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:36,156 INFO L93 Difference]: Finished difference Result 31506 states and 46739 transitions. [2021-11-17 02:12:36,157 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-17 02:12:36,157 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 14.125) internal successors, (113), 8 states have internal predecessors, (113), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) Word has length 240 [2021-11-17 02:12:36,157 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:36,304 INFO L225 Difference]: With dead ends: 31506 [2021-11-17 02:12:36,305 INFO L226 Difference]: Without dead ends: 25825 [2021-11-17 02:12:36,347 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 493 GetRequests, 477 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=98, Invalid=208, Unknown=0, NotChecked=0, Total=306 [2021-11-17 02:12:36,347 INFO L933 BasicCegarLoop]: 4772 mSDtfsCounter, 7108 mSDsluCounter, 21390 mSDsCounter, 0 mSdLazyCounter, 1820 mSolverCounterSat, 793 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7227 SdHoareTripleChecker+Valid, 26162 SdHoareTripleChecker+Invalid, 2614 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 793 IncrementalHoareTripleChecker+Valid, 1820 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:36,349 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7227 Valid, 26162 Invalid, 2614 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [793 Valid, 1820 Invalid, 1 Unknown, 0 Unchecked, 11.1s Time] [2021-11-17 02:12:36,378 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25825 states. [2021-11-17 02:12:37,134 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25825 to 11006. [2021-11-17 02:12:37,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11006 states, 7749 states have (on average 1.395793005549103) internal successors, (10816), 8165 states have internal predecessors, (10816), 2569 states have call successors, (2569), 677 states have call predecessors, (2569), 687 states have return successors, (2735), 2365 states have call predecessors, (2735), 2567 states have call successors, (2735) [2021-11-17 02:12:37,193 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11006 states to 11006 states and 16120 transitions. [2021-11-17 02:12:37,197 INFO L78 Accepts]: Start accepts. Automaton has 11006 states and 16120 transitions. Word has length 240 [2021-11-17 02:12:37,197 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:37,198 INFO L470 AbstractCegarLoop]: Abstraction has 11006 states and 16120 transitions. [2021-11-17 02:12:37,198 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 14.125) internal successors, (113), 8 states have internal predecessors, (113), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-17 02:12:37,198 INFO L276 IsEmpty]: Start isEmpty. Operand 11006 states and 16120 transitions. [2021-11-17 02:12:37,216 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2021-11-17 02:12:37,217 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:37,217 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:37,249 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:37,431 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:37,431 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:37,432 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:37,432 INFO L85 PathProgramCache]: Analyzing trace with hash 1818389992, now seen corresponding path program 1 times [2021-11-17 02:12:37,433 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:37,433 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1108181889] [2021-11-17 02:12:37,433 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:37,433 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:37,434 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:37,435 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:37,438 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-11-17 02:12:38,340 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:38,384 INFO L263 TraceCheckSpWp]: Trace formula consists of 1306 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:12:38,388 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:38,960 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 111 proven. 0 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2021-11-17 02:12:38,960 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:39,463 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2021-11-17 02:12:39,463 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:39,463 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1108181889] [2021-11-17 02:12:39,463 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1108181889] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:39,463 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:39,463 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:12:39,463 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [735286388] [2021-11-17 02:12:39,463 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:39,464 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:12:39,464 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:39,465 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:12:39,465 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:12:39,465 INFO L87 Difference]: Start difference. First operand 11006 states and 16120 transitions. Second operand has 4 states, 4 states have (on average 42.0) internal successors, (168), 4 states have internal predecessors, (168), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) [2021-11-17 02:12:41,453 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.99s for a HTC check with result INVALID. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:12:44,879 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:44,879 INFO L93 Difference]: Finished difference Result 42908 states and 62923 transitions. [2021-11-17 02:12:44,880 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-17 02:12:44,880 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 42.0) internal successors, (168), 4 states have internal predecessors, (168), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) Word has length 240 [2021-11-17 02:12:44,881 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:45,014 INFO L225 Difference]: With dead ends: 42908 [2021-11-17 02:12:45,014 INFO L226 Difference]: Without dead ends: 31925 [2021-11-17 02:12:45,062 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 478 GetRequests, 476 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:12:45,063 INFO L933 BasicCegarLoop]: 5679 mSDtfsCounter, 4233 mSDsluCounter, 5596 mSDsCounter, 0 mSdLazyCounter, 713 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 4.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4233 SdHoareTripleChecker+Valid, 11275 SdHoareTripleChecker+Invalid, 733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 713 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 4.5s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:45,064 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4233 Valid, 11275 Invalid, 733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 713 Invalid, 0 Unknown, 0 Unchecked, 4.5s Time] [2021-11-17 02:12:45,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31925 states. [2021-11-17 02:12:46,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31925 to 31913. [2021-11-17 02:12:46,596 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31913 states, 22535 states have (on average 1.3984468604393165) internal successors, (31514), 23727 states have internal predecessors, (31514), 7387 states have call successors, (7387), 1960 states have call predecessors, (7387), 1990 states have return successors, (7881), 6779 states have call predecessors, (7881), 7385 states have call successors, (7881) [2021-11-17 02:12:46,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31913 states to 31913 states and 46782 transitions. [2021-11-17 02:12:46,723 INFO L78 Accepts]: Start accepts. Automaton has 31913 states and 46782 transitions. Word has length 240 [2021-11-17 02:12:46,724 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:46,724 INFO L470 AbstractCegarLoop]: Abstraction has 31913 states and 46782 transitions. [2021-11-17 02:12:46,724 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 42.0) internal successors, (168), 4 states have internal predecessors, (168), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) [2021-11-17 02:12:46,725 INFO L276 IsEmpty]: Start isEmpty. Operand 31913 states and 46782 transitions. [2021-11-17 02:12:46,967 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2021-11-17 02:12:46,967 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:46,968 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:46,998 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-11-17 02:12:47,187 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:47,188 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:47,188 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:47,188 INFO L85 PathProgramCache]: Analyzing trace with hash -771994492, now seen corresponding path program 1 times [2021-11-17 02:12:47,189 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:47,189 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [360982463] [2021-11-17 02:12:47,189 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:47,190 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:47,190 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:47,190 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:47,196 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-11-17 02:12:47,934 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:47,980 INFO L263 TraceCheckSpWp]: Trace formula consists of 1394 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-17 02:12:47,984 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:48,544 INFO L134 CoverageAnalysis]: Checked inductivity of 282 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 240 trivial. 0 not checked. [2021-11-17 02:12:48,544 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:49,024 INFO L134 CoverageAnalysis]: Checked inductivity of 282 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 260 trivial. 0 not checked. [2021-11-17 02:12:49,025 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:49,025 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [360982463] [2021-11-17 02:12:49,025 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [360982463] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:49,025 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:49,025 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-17 02:12:49,025 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081660244] [2021-11-17 02:12:49,025 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:49,026 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-17 02:12:49,026 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:49,026 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-17 02:12:49,026 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-17 02:12:49,027 INFO L87 Difference]: Start difference. First operand 31913 states and 46782 transitions. Second operand has 5 states, 5 states have (on average 27.6) internal successors, (138), 5 states have internal predecessors, (138), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) [2021-11-17 02:12:51,069 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 2.04s for a HTC check with result UNKNOWN. Formula has sorts [Array, Bool, BitVec], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-17 02:12:51,708 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:51,708 INFO L93 Difference]: Finished difference Result 47850 states and 70064 transitions. [2021-11-17 02:12:51,708 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-17 02:12:51,709 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 27.6) internal successors, (138), 5 states have internal predecessors, (138), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) Word has length 266 [2021-11-17 02:12:51,709 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:51,766 INFO L225 Difference]: With dead ends: 47850 [2021-11-17 02:12:51,767 INFO L226 Difference]: Without dead ends: 15781 [2021-11-17 02:12:51,823 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 532 GetRequests, 527 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-17 02:12:51,824 INFO L933 BasicCegarLoop]: 2265 mSDtfsCounter, 15 mSDsluCounter, 6772 mSDsCounter, 0 mSdLazyCounter, 14 mSolverCounterSat, 5 mSolverCounterUnsat, 1 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 9037 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 14 IncrementalHoareTripleChecker+Invalid, 1 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:51,824 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 9037 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 14 Invalid, 1 Unknown, 0 Unchecked, 2.1s Time] [2021-11-17 02:12:51,839 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15781 states. [2021-11-17 02:12:52,465 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15781 to 15771. [2021-11-17 02:12:52,478 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15771 states, 11113 states have (on average 1.3958427067398542) internal successors, (15512), 11711 states have internal predecessors, (15512), 3657 states have call successors, (3657), 988 states have call predecessors, (3657), 1000 states have return successors, (3891), 3347 states have call predecessors, (3891), 3655 states have call successors, (3891) [2021-11-17 02:12:52,526 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15771 states to 15771 states and 23060 transitions. [2021-11-17 02:12:52,533 INFO L78 Accepts]: Start accepts. Automaton has 15771 states and 23060 transitions. Word has length 266 [2021-11-17 02:12:52,533 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:52,533 INFO L470 AbstractCegarLoop]: Abstraction has 15771 states and 23060 transitions. [2021-11-17 02:12:52,534 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 27.6) internal successors, (138), 5 states have internal predecessors, (138), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) [2021-11-17 02:12:52,534 INFO L276 IsEmpty]: Start isEmpty. Operand 15771 states and 23060 transitions. [2021-11-17 02:12:52,564 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 290 [2021-11-17 02:12:52,564 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:52,565 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:52,594 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (17)] Ended with exit code 0 [2021-11-17 02:12:52,783 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:52,784 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:52,784 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:52,784 INFO L85 PathProgramCache]: Analyzing trace with hash 49200001, now seen corresponding path program 1 times [2021-11-17 02:12:52,786 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:52,786 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [234287857] [2021-11-17 02:12:52,786 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:52,786 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:52,786 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:52,787 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:52,788 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-11-17 02:12:53,690 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:53,747 INFO L263 TraceCheckSpWp]: Trace formula consists of 1526 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:12:53,755 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:54,373 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:12:54,374 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:55,121 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:12:55,122 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:55,122 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [234287857] [2021-11-17 02:12:55,122 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [234287857] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:55,122 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:55,122 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:12:55,122 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [943347929] [2021-11-17 02:12:55,122 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:55,123 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:12:55,123 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:55,124 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:12:55,124 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:12:55,124 INFO L87 Difference]: Start difference. First operand 15771 states and 23060 transitions. Second operand has 4 states, 4 states have (on average 67.75) internal successors, (271), 4 states have internal predecessors, (271), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:12:55,789 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:12:55,789 INFO L93 Difference]: Finished difference Result 31485 states and 46039 transitions. [2021-11-17 02:12:55,790 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:12:55,790 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 67.75) internal successors, (271), 4 states have internal predecessors, (271), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 289 [2021-11-17 02:12:55,790 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:12:55,836 INFO L225 Difference]: With dead ends: 31485 [2021-11-17 02:12:55,837 INFO L226 Difference]: Without dead ends: 15747 [2021-11-17 02:12:55,863 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 576 GetRequests, 574 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:12:55,863 INFO L933 BasicCegarLoop]: 2264 mSDtfsCounter, 2254 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2254 SdHoareTripleChecker+Valid, 2264 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:12:55,864 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2254 Valid, 2264 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 02:12:55,874 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15747 states. [2021-11-17 02:12:56,473 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15747 to 15747. [2021-11-17 02:12:56,489 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15747 states, 11101 states have (on average 1.3951896225565263) internal successors, (15488), 11699 states have internal predecessors, (15488), 3645 states have call successors, (3645), 988 states have call predecessors, (3645), 1000 states have return successors, (3873), 3335 states have call predecessors, (3873), 3643 states have call successors, (3873) [2021-11-17 02:12:56,539 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15747 states to 15747 states and 23006 transitions. [2021-11-17 02:12:56,545 INFO L78 Accepts]: Start accepts. Automaton has 15747 states and 23006 transitions. Word has length 289 [2021-11-17 02:12:56,545 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:12:56,545 INFO L470 AbstractCegarLoop]: Abstraction has 15747 states and 23006 transitions. [2021-11-17 02:12:56,545 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 67.75) internal successors, (271), 4 states have internal predecessors, (271), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:12:56,545 INFO L276 IsEmpty]: Start isEmpty. Operand 15747 states and 23006 transitions. [2021-11-17 02:12:56,571 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 291 [2021-11-17 02:12:56,571 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:12:56,572 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:12:56,597 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (18)] Ended with exit code 0 [2021-11-17 02:12:56,772 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:12:56,772 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:12:56,773 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:12:56,773 INFO L85 PathProgramCache]: Analyzing trace with hash -1034291622, now seen corresponding path program 1 times [2021-11-17 02:12:56,774 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:12:56,774 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [116855726] [2021-11-17 02:12:56,774 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:12:56,774 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:12:56,774 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:12:56,775 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:12:56,776 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2021-11-17 02:12:57,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:12:57,696 INFO L263 TraceCheckSpWp]: Trace formula consists of 1528 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:12:57,701 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:12:58,383 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:12:58,383 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:12:59,022 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:12:59,023 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:12:59,023 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [116855726] [2021-11-17 02:12:59,023 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [116855726] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:12:59,023 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:12:59,024 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:12:59,027 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1822435435] [2021-11-17 02:12:59,027 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:12:59,028 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:12:59,028 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:12:59,028 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:12:59,029 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:12:59,030 INFO L87 Difference]: Start difference. First operand 15747 states and 23006 transitions. Second operand has 4 states, 4 states have (on average 68.25) internal successors, (273), 4 states have internal predecessors, (273), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:13:01,002 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:13:01,002 INFO L93 Difference]: Finished difference Result 31437 states and 45931 transitions. [2021-11-17 02:13:01,003 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:13:01,003 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 68.25) internal successors, (273), 4 states have internal predecessors, (273), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 290 [2021-11-17 02:13:01,003 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:13:01,071 INFO L225 Difference]: With dead ends: 31437 [2021-11-17 02:13:01,071 INFO L226 Difference]: Without dead ends: 15723 [2021-11-17 02:13:01,116 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 578 GetRequests, 576 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:13:01,117 INFO L933 BasicCegarLoop]: 2260 mSDtfsCounter, 3758 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 742 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3758 SdHoareTripleChecker+Valid, 2260 SdHoareTripleChecker+Invalid, 743 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 742 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2021-11-17 02:13:01,117 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3758 Valid, 2260 Invalid, 743 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [742 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2021-11-17 02:13:01,127 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15723 states. [2021-11-17 02:13:01,936 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15723 to 15723. [2021-11-17 02:13:01,949 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15723 states, 11089 states have (on average 1.394535124898548) internal successors, (15464), 11687 states have internal predecessors, (15464), 3633 states have call successors, (3633), 988 states have call predecessors, (3633), 1000 states have return successors, (3855), 3323 states have call predecessors, (3855), 3631 states have call successors, (3855) [2021-11-17 02:13:01,994 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15723 states to 15723 states and 22952 transitions. [2021-11-17 02:13:01,999 INFO L78 Accepts]: Start accepts. Automaton has 15723 states and 22952 transitions. Word has length 290 [2021-11-17 02:13:01,999 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:13:02,000 INFO L470 AbstractCegarLoop]: Abstraction has 15723 states and 22952 transitions. [2021-11-17 02:13:02,000 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 68.25) internal successors, (273), 4 states have internal predecessors, (273), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:13:02,000 INFO L276 IsEmpty]: Start isEmpty. Operand 15723 states and 22952 transitions. [2021-11-17 02:13:02,027 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 293 [2021-11-17 02:13:02,027 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:13:02,027 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:13:02,054 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (19)] Forceful destruction successful, exit code 0 [2021-11-17 02:13:02,237 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:13:02,238 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:13:02,238 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:13:02,239 INFO L85 PathProgramCache]: Analyzing trace with hash 1857137467, now seen corresponding path program 1 times [2021-11-17 02:13:02,240 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:13:02,240 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [359803129] [2021-11-17 02:13:02,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:13:02,240 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:13:02,240 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:13:02,241 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:13:02,244 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (20)] Waiting until timeout for monitored process [2021-11-17 02:13:03,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:13:03,071 INFO L263 TraceCheckSpWp]: Trace formula consists of 1532 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:13:03,075 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:13:03,671 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:13:03,671 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:13:04,277 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:13:04,277 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:13:04,277 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [359803129] [2021-11-17 02:13:04,277 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [359803129] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:13:04,277 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:13:04,278 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:13:04,278 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1203332195] [2021-11-17 02:13:04,278 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:13:04,278 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:13:04,279 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:13:04,279 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:13:04,279 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:13:04,279 INFO L87 Difference]: Start difference. First operand 15723 states and 22952 transitions. Second operand has 4 states, 4 states have (on average 69.25) internal successors, (277), 4 states have internal predecessors, (277), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:13:05,949 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:13:05,949 INFO L93 Difference]: Finished difference Result 31389 states and 45823 transitions. [2021-11-17 02:13:05,949 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:13:05,950 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 69.25) internal successors, (277), 4 states have internal predecessors, (277), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 292 [2021-11-17 02:13:05,950 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:13:06,014 INFO L225 Difference]: With dead ends: 31389 [2021-11-17 02:13:06,014 INFO L226 Difference]: Without dead ends: 15699 [2021-11-17 02:13:06,047 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 582 GetRequests, 580 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:13:06,050 INFO L933 BasicCegarLoop]: 2256 mSDtfsCounter, 3748 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 740 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.9s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3748 SdHoareTripleChecker+Valid, 2256 SdHoareTripleChecker+Invalid, 741 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 740 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:13:06,050 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3748 Valid, 2256 Invalid, 741 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [740 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.1s Time] [2021-11-17 02:13:06,062 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15699 states. [2021-11-17 02:13:06,791 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15699 to 15699. [2021-11-17 02:13:06,811 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15699 states, 11077 states have (on average 1.3938792091721586) internal successors, (15440), 11675 states have internal predecessors, (15440), 3621 states have call successors, (3621), 988 states have call predecessors, (3621), 1000 states have return successors, (3837), 3311 states have call predecessors, (3837), 3619 states have call successors, (3837) [2021-11-17 02:13:06,865 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15699 states to 15699 states and 22898 transitions. [2021-11-17 02:13:06,869 INFO L78 Accepts]: Start accepts. Automaton has 15699 states and 22898 transitions. Word has length 292 [2021-11-17 02:13:06,869 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:13:06,869 INFO L470 AbstractCegarLoop]: Abstraction has 15699 states and 22898 transitions. [2021-11-17 02:13:06,869 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 69.25) internal successors, (277), 4 states have internal predecessors, (277), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:13:06,870 INFO L276 IsEmpty]: Start isEmpty. Operand 15699 states and 22898 transitions. [2021-11-17 02:13:06,895 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-11-17 02:13:06,895 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:13:06,895 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:13:06,917 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (20)] Forceful destruction successful, exit code 0 [2021-11-17 02:13:07,095 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:13:07,096 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:13:07,096 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:13:07,096 INFO L85 PathProgramCache]: Analyzing trace with hash -1183594878, now seen corresponding path program 1 times [2021-11-17 02:13:07,098 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:13:07,098 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1875240056] [2021-11-17 02:13:07,098 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:13:07,098 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:13:07,098 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:13:07,100 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:13:07,102 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2021-11-17 02:13:07,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-17 02:13:07,953 INFO L263 TraceCheckSpWp]: Trace formula consists of 1530 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-17 02:13:07,957 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-17 02:13:08,655 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-17 02:13:08,655 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-17 02:13:09,241 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-17 02:13:09,241 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-17 02:13:09,242 INFO L332 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1875240056] [2021-11-17 02:13:09,242 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1875240056] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-17 02:13:09,242 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-17 02:13:09,242 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-17 02:13:09,242 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [598052919] [2021-11-17 02:13:09,242 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-17 02:13:09,243 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-17 02:13:09,243 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-17 02:13:09,243 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-17 02:13:09,243 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:13:09,244 INFO L87 Difference]: Start difference. First operand 15699 states and 22898 transitions. Second operand has 4 states, 4 states have (on average 68.75) internal successors, (275), 4 states have internal predecessors, (275), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:13:09,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-17 02:13:09,948 INFO L93 Difference]: Finished difference Result 31341 states and 45715 transitions. [2021-11-17 02:13:09,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-17 02:13:09,948 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 68.75) internal successors, (275), 4 states have internal predecessors, (275), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 291 [2021-11-17 02:13:09,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-17 02:13:09,987 INFO L225 Difference]: With dead ends: 31341 [2021-11-17 02:13:09,987 INFO L226 Difference]: Without dead ends: 15675 [2021-11-17 02:13:10,011 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 580 GetRequests, 578 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-17 02:13:10,012 INFO L933 BasicCegarLoop]: 2252 mSDtfsCounter, 2240 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2240 SdHoareTripleChecker+Valid, 2252 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-17 02:13:10,012 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2240 Valid, 2252 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-17 02:13:10,021 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15675 states. [2021-11-17 02:13:10,575 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15675 to 15675. [2021-11-17 02:13:10,587 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15675 states, 11065 states have (on average 1.3932218707636692) internal successors, (15416), 11663 states have internal predecessors, (15416), 3609 states have call successors, (3609), 988 states have call predecessors, (3609), 1000 states have return successors, (3819), 3299 states have call predecessors, (3819), 3607 states have call successors, (3819) [2021-11-17 02:13:10,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15675 states to 15675 states and 22844 transitions. [2021-11-17 02:13:10,627 INFO L78 Accepts]: Start accepts. Automaton has 15675 states and 22844 transitions. Word has length 291 [2021-11-17 02:13:10,627 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-17 02:13:10,627 INFO L470 AbstractCegarLoop]: Abstraction has 15675 states and 22844 transitions. [2021-11-17 02:13:10,628 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 68.75) internal successors, (275), 4 states have internal predecessors, (275), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-17 02:13:10,628 INFO L276 IsEmpty]: Start isEmpty. Operand 15675 states and 22844 transitions. [2021-11-17 02:13:10,644 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 316 [2021-11-17 02:13:10,644 INFO L506 BasicCegarLoop]: Found error trace [2021-11-17 02:13:10,645 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:13:10,667 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (21)] Forceful destruction successful, exit code 0 [2021-11-17 02:13:10,845 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:13:10,845 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-17 02:13:10,846 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-17 02:13:10,846 INFO L85 PathProgramCache]: Analyzing trace with hash 924065820, now seen corresponding path program 1 times [2021-11-17 02:13:10,847 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-17 02:13:10,847 INFO L332 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1396324631] [2021-11-17 02:13:10,847 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-17 02:13:10,847 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-17 02:13:10,847 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat [2021-11-17 02:13:10,848 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-17 02:13:10,850 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2021-11-17 02:13:14,218 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:13:14,218 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-17 02:13:30,291 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-17 02:13:31,823 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-17 02:13:31,824 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-17 02:13:31,825 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-17 02:13:31,891 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 (22)] Forceful destruction successful, exit code 0 [2021-11-17 02:13:32,047 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/mathsat -unsat_core_generation=3 [2021-11-17 02:13:32,051 INFO L732 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-17 02:13:32,053 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-17 02:13:32,130 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:13:32,134 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-17 02:13:32,593 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 17.11 02:13:32 BoogieIcfgContainer [2021-11-17 02:13:32,594 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-17 02:13:32,595 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-17 02:13:32,595 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-17 02:13:32,595 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-17 02:13:32,595 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 17.11 02:11:44" (3/4) ... [2021-11-17 02:13:32,599 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-17 02:13:32,599 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-17 02:13:32,600 INFO L158 Benchmark]: Toolchain (without parser) took 134404.27ms. Allocated memory was 65.0MB in the beginning and 5.3GB in the end (delta: 5.2GB). Free memory was 34.8MB in the beginning and 4.0GB in the end (delta: -3.9GB). Peak memory consumption was 1.3GB. Max. memory is 16.1GB. [2021-11-17 02:13:32,600 INFO L158 Benchmark]: CDTParser took 0.11ms. Allocated memory is still 65.0MB. Free memory was 47.3MB in the beginning and 47.3MB in the end (delta: 49.4kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 02:13:32,600 INFO L158 Benchmark]: CACSL2BoogieTranslator took 2277.40ms. Allocated memory was 65.0MB in the beginning and 125.8MB in the end (delta: 60.8MB). Free memory was 34.5MB in the beginning and 71.9MB in the end (delta: -37.5MB). Peak memory consumption was 56.4MB. Max. memory is 16.1GB. [2021-11-17 02:13:32,600 INFO L158 Benchmark]: Boogie Procedure Inliner took 198.40ms. Allocated memory is still 125.8MB. Free memory was 71.9MB in the beginning and 47.4MB in the end (delta: 24.5MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. [2021-11-17 02:13:32,603 INFO L158 Benchmark]: Boogie Preprocessor took 259.09ms. Allocated memory is still 125.8MB. Free memory was 47.4MB in the beginning and 40.1MB in the end (delta: 7.4MB). Peak memory consumption was 15.9MB. Max. memory is 16.1GB. [2021-11-17 02:13:32,604 INFO L158 Benchmark]: RCFGBuilder took 23307.88ms. Allocated memory was 125.8MB in the beginning and 272.6MB in the end (delta: 146.8MB). Free memory was 40.1MB in the beginning and 153.1MB in the end (delta: -113.1MB). Peak memory consumption was 115.6MB. Max. memory is 16.1GB. [2021-11-17 02:13:32,604 INFO L158 Benchmark]: TraceAbstraction took 108350.75ms. Allocated memory was 272.6MB in the beginning and 5.3GB in the end (delta: 5.0GB). Free memory was 152.1MB in the beginning and 4.0GB in the end (delta: -3.8GB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. [2021-11-17 02:13:32,606 INFO L158 Benchmark]: Witness Printer took 4.62ms. Allocated memory is still 5.3GB. Free memory was 4.0GB in the beginning and 4.0GB in the end (delta: 277.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-17 02:13:32,613 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.11ms. Allocated memory is still 65.0MB. Free memory was 47.3MB in the beginning and 47.3MB in the end (delta: 49.4kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 2277.40ms. Allocated memory was 65.0MB in the beginning and 125.8MB in the end (delta: 60.8MB). Free memory was 34.5MB in the beginning and 71.9MB in the end (delta: -37.5MB). Peak memory consumption was 56.4MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 198.40ms. Allocated memory is still 125.8MB. Free memory was 71.9MB in the beginning and 47.4MB in the end (delta: 24.5MB). Peak memory consumption was 25.2MB. Max. memory is 16.1GB. * Boogie Preprocessor took 259.09ms. Allocated memory is still 125.8MB. Free memory was 47.4MB in the beginning and 40.1MB in the end (delta: 7.4MB). Peak memory consumption was 15.9MB. Max. memory is 16.1GB. * RCFGBuilder took 23307.88ms. Allocated memory was 125.8MB in the beginning and 272.6MB in the end (delta: 146.8MB). Free memory was 40.1MB in the beginning and 153.1MB in the end (delta: -113.1MB). Peak memory consumption was 115.6MB. Max. memory is 16.1GB. * TraceAbstraction took 108350.75ms. Allocated memory was 272.6MB in the beginning and 5.3GB in the end (delta: 5.0GB). Free memory was 152.1MB in the beginning and 4.0GB in the end (delta: -3.8GB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. * Witness Printer took 4.62ms. Allocated memory is still 5.3GB. Free memory was 4.0GB in the beginning and 4.0GB in the end (delta: 277.8kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8176]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6875. Possible FailurePath: [L4318] int ldv_timer_state_5 = 0; [L4319] int ldv_state_variable_8 ; [L4320] struct timer_list *ldv_timer_list_5 ; [L4321] struct timer_list *ldv_timer_list_4 ; [L4322] struct work_struct *ldv_work_struct_3_1 ; [L4323] struct mmc_host *vub300_mmc_ops_group0 ; [L4324] struct work_struct *ldv_work_struct_1_3 ; [L4325] int ldv_state_variable_0 ; [L4326] int ldv_state_variable_5 ; [L4327] int ldv_work_1_1 ; [L4328] int ldv_work_3_2 ; [L4329] int ldv_work_3_0 ; [L4330] struct work_struct *ldv_work_struct_2_3 ; [L4331] struct work_struct *ldv_work_struct_2_0 ; [L4332] int ldv_timer_state_6 = 0; [L4333] struct work_struct *ldv_work_struct_2_2 ; [L4334] int ldv_timer_state_4 = 0; [L4335] int ref_cnt ; [L4336] int ldv_work_3_3 ; [L4337] int ldv_state_variable_1 ; [L4338] int ldv_state_variable_7 ; [L4339] struct work_struct *ldv_work_struct_3_3 ; [L4340] struct work_struct *ldv_work_struct_1_0 ; [L4341] struct work_struct *ldv_work_struct_1_1 ; [L4342] int ldv_work_1_3 ; [L4343] struct work_struct *ldv_work_struct_2_1 ; [L4344] struct timer_list *ldv_timer_list_6 ; [L4345] struct work_struct *ldv_work_struct_3_2 ; [L4346] int ldv_state_variable_6 ; [L4347] int ldv_work_3_1 ; [L4348] int ldv_state_variable_2 ; [L4349] int ldv_work_2_0 ; [L4350] int usb_counter ; [L4351] struct work_struct *ldv_work_struct_3_0 ; [L4352] int ldv_work_1_2 ; [L4353] int LDV_IN_INTERRUPT = 1; [L4354] struct work_struct *ldv_work_struct_1_2 ; [L4355] int ldv_work_2_2 ; [L4356] int ldv_state_variable_3 ; [L4357] struct usb_interface *vub300_driver_group1 ; [L4358] int ldv_work_1_0 ; [L4359] int ldv_work_2_3 ; [L4360] int ldv_state_variable_4 ; [L4361] int ldv_work_2_1 ; [L4422] static bool limit_speed_to_24_MHz ; [L4423] static bool pad_input_to_usb_pkt ; [L4424] static bool disable_offload_processing ; [L4425] static bool force_1_bit_data_xfers ; [L4426] static bool force_polling_for_irqs ; [L4427] static int firmware_irqpoll_timeout = 1024; [L4428] static int force_max_req_size = 128; [L4429] static int firmware_rom_wait_states = 28; [L4430-L4435] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4436] struct usb_device_id const __mod_usb_device_table ; [L4437] static struct workqueue_struct *cmndworkqueue ; [L4438] static struct workqueue_struct *pollworkqueue ; [L4439] static struct workqueue_struct *deadworkqueue ; [L6425-L6427] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6835-L6841] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6914] int ldv_retval_0 ; [L6916] int ldv_retval_1 ; [L6919] int ldv_retval_3 ; [L6920] int ldv_retval_2 ; [L8179] int URB_STATE = 0; [L8180] int DEV_STATE = 0; [L8181] int INTERF_STATE = 0; [L8182] int SERIAL_STATE = 0; [L8183] void *usb_intfdata = (void *)0; [L8184] struct urb *int_urb = (struct urb *)0; [L8185] struct urb *bulk_urb = (struct urb *)0; [L8186] void (*completeFnInt)(struct urb * ) ; [L8187] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7559] struct usb_device_id *ldvarg1 ; [L7560] void *tmp ; [L7561] pm_message_t ldvarg0 ; [L7562] struct mmc_card *ldvarg4 ; [L7563] void *tmp___0 ; [L7564] struct mmc_ios *ldvarg3 ; [L7565] void *tmp___1 ; [L7566] int ldvarg5 ; [L7567] struct mmc_request *ldvarg2 ; [L7568] void *tmp___2 ; [L7569] int tmp___3 ; [L7570] int tmp___4 ; [L7571] int tmp___5 ; [L7572] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7574] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={103:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={103:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={103:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={103:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={103:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7574] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={103:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7574] tmp = ldv_init_zalloc(32UL) [L7575] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7576] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524307:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524307:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={524307:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={524307:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524307:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={524307:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={524307:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={524307:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={524307:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={524307:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={524307:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7576] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={524307:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7576] tmp___0 = ldv_init_zalloc(1816UL) [L7577] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7578] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={393694500630355263:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={393694500630355263:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={393694500630355263:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={393694500630355263:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={393694500630355263:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={393694500630355263:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={393694500630355263:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={393694500630355263:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={393694500630355263:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={393694500630355263:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={393694500630355263:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7578] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={393694500630355263:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7578] tmp___1 = ldv_init_zalloc(16UL) [L7579] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7580] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8464145032878284358:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8464145032878284358:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8464145032878284358:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={8464145032878284358:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8464145032878284358:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8464145032878284358:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={8464145032878284358:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={8464145032878284358:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={8464145032878284358:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={8464145032878284358:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={8464145032878284358:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7580] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={8464145032878284358:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7580] tmp___2 = ldv_init_zalloc(136UL) [L7581] ldvarg2 = (struct mmc_request *)tmp___2 [L7582] FCALL ldv_initialize() [L7583] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491461:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491461:0}, s={-759227003976491461:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-759227003976491461:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491461:0}, s={-759227003976491461:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-759227003976491461:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491461:0}, s={-759227003976491461:0}, SERIAL_STATE=0, tmp={-759227003976491461:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7583] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={-759227003976491461:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7584] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491463:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491463:0}, s={-759227003976491463:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-759227003976491463:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491463:0}, s={-759227003976491463:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-759227003976491463:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-759227003976491463:0}, s={-759227003976491463:0}, SERIAL_STATE=0, tmp={-759227003976491463:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7584] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={-759227003976491463:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7585] ldv_state_variable_6 = 1 [L7586] CALL work_init_3() [L6924] ldv_work_3_0 = 0 [L6925] ldv_work_3_1 = 0 [L6926] ldv_work_3_2 = 0 [L6927] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7586] RET work_init_3() [L7587] ldv_state_variable_3 = 1 [L7588] ldv_state_variable_7 = 0 [L7589] CALL work_init_2() [L6974] ldv_work_2_0 = 0 [L6975] ldv_work_2_1 = 0 [L6976] ldv_work_2_2 = 0 [L6977] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7589] RET work_init_2() [L7590] ldv_state_variable_2 = 1 [L7591] ldv_state_variable_8 = 0 [L7592] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7592] RET work_init_1() [L7593] ldv_state_variable_1 = 1 [L7594] ldv_state_variable_4 = 1 [L7595] ref_cnt = 0 [L7596] ldv_state_variable_0 = 1 [L7597] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=7, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: [L7752] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7753] COND TRUE ldv_state_variable_0 == 1 [L7754] CALL, EXPR vub300_init() [L6844] int result ; [L6845] struct lock_class_key __key ; [L6846] char const *__lock_name ; [L6847] struct workqueue_struct *tmp ; [L6848] struct lock_class_key __key___0 ; [L6849] char const *__lock_name___0 ; [L6850] struct workqueue_struct *tmp___0 ; [L6851] struct lock_class_key __key___1 ; [L6852] char const *__lock_name___1 ; [L6853] struct workqueue_struct *tmp___1 ; [L6857] __lock_name = "kvub300c" [L6858] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6859] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={33816592:-9223301668110597632}, __key={-576460752303422973:0}, __key___0={-576390314839768574:0}, __key___1={-759227003976491454:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={33816592:-9223301668110597632}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L6860] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6866] __lock_name___0 = "kvub300p" [L6867] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6868] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={33816592:-9223301668110597632}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372019607797728:137439215616}, __key={-576460752303422973:0}, __key___0={-576390314839768574:0}, __key___1={-759227003976491454:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={33816592:-9223301668110597632}, tmp___0={-9223372019607797728:137439215616}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L6869] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6875] __lock_name___1 = "kvub300d" [L6876] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6877] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={33816592:-9223301668110597632}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={2097152:-9223372036586340352}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372019607797728:137439215616}, __key={-576460752303422973:0}, __key___0={-576390314839768574:0}, __key___1={-759227003976491454:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={33816592:-9223301668110597632}, tmp___0={-9223372019607797728:137439215616}, tmp___1={2097152:-9223372036586340352}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L6878] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8081] ldv_func_ret_type___12 ldv_func_res ; [L8082] int tmp ; [L8084] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8556] return __VERIFIER_nondet_int(); [L8084] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8084] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8085] ldv_func_res = tmp [L8086] ldv_state_variable_7 = 1 [L8087] usb_counter = 0 [L8088] CALL ldv_usb_driver_7() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-759227003976491735:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-759227003976491735:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-759227003976491735:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-759227003976491735:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, cond=1, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-759227003976491735:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-759227003976491735:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-759227003976491735:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-759227003976491735:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-759227003976491735:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-759227003976491735:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-759227003976491735:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-759227003976491735:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={-759227003976491735:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L8088] RET ldv_usb_driver_7() [L8089] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-646637013292229056:0}, ldv_func_arg1={-646637013292229056:0}, ldv_func_arg2={86:85}, ldv_func_arg2={86:85}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L6884] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6884] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6885] COND FALSE !(result != 0) [L6890] return (0); [L6890] return (0); [L6890] return (0); [L6890] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={33816592:-9223301668110597632}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={2097152:-9223372036586340352}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372019607797728:137439215616}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={33816592:-9223301668110597632}, tmp___0={-9223372019607797728:137439215616}, tmp___1={2097152:-9223372036586340352}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7754] RET, EXPR vub300_init() [L7754] ldv_retval_3 = vub300_init() [L7755] COND TRUE ldv_retval_3 == 0 [L7756] ldv_state_variable_0 = 3 [L7757] ldv_state_variable_8 = 1 [L7758] CALL ldv_initialize_mmc_host_ops_8() [L7193] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7195] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-829595272755579218:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-829595272755579218:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-829595272755579218:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-829595272755579218:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, cond=1, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-829595272755579218:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-829595272755579218:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-829595272755579218:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-829595272755579218:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, calloc(1UL, size)={-829595272755579218:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-829595272755579218:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-829595272755579218:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7195] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-829595272755579218:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={0:0}, vub300_table={-759227003976491465:0}] [L7195] tmp = ldv_init_zalloc(2624UL) [L7196] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={-829595272755579218:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7758] RET ldv_initialize_mmc_host_ops_8() [L7761] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=2, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7614] COND TRUE ldv_state_variable_7 != 0 [L7615] tmp___4 = __VERIFIER_nondet_int() [L7617] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7618] COND TRUE ldv_state_variable_7 == 1 [L7619] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6430] struct vub300_mmc_host *vub300 ; [L6431] struct usb_host_interface *iface_desc ; [L6432] struct usb_device *udev ; [L6433] struct usb_device *tmp ; [L6434] struct usb_device *tmp___0 ; [L6435] int i ; [L6436] int retval ; [L6437] struct urb *command_out_urb ; [L6438] struct urb *command_res_urb ; [L6439] struct mmc_host *mmc ; [L6440] char manufacturer[48U] ; [L6441] char product[32U] ; [L6442] char serial_number[32U] ; [L6443] void *tmp___1 ; [L6444] struct lock_class_key __key ; [L6445] struct lock_class_key __key___0 ; [L6446] int tmp___2 ; [L6447] struct usb_endpoint_descriptor *endpoint ; [L6448] int tmp___4 ; [L6449] char *tmp___5 ; [L6450] int tmp___6 ; [L6451] int tmp___7 ; [L6452] int tmp___8 ; [L6453] unsigned int tmp___9 ; [L6454] unsigned int tmp___10 ; [L6455] unsigned int tmp___11 ; [L6456] struct lock_class_key __key___1 ; [L6457] atomic_long_t __constr_expr_0 ; [L6458] struct lock_class_key __key___2 ; [L6459] atomic_long_t __constr_expr_1 ; [L6460] struct lock_class_key __key___3 ; [L6461] atomic_long_t __constr_expr_2 ; [L6462] int tmp___12 ; [L6463] int tmp___13 ; [L6465] CALL, EXPR interface_to_usbdev(interface) [L7824] struct usb_device *tmp ; [L7826] CALL, EXPR ldv_interface_to_usbdev() [L8302] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8307] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND FALSE !(tmp___0 != 0) [L4246] tmp = malloc(size) [L4247] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-759227003976491474:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-759227003976491474:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L4248] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, cond=1, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L4248] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-759227003976491474:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-759227003976491474:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L4249] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={-759227003976491474:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-759227003976491474:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-759227003976491474:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8307] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-759227003976491474:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8307] result = ldv_malloc(sizeof(struct usb_device)) [L8308] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8312] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-759227003976491474:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, result={-759227003976491474:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7826] RET, EXPR ldv_interface_to_usbdev() [L7826] tmp = ldv_interface_to_usbdev() [L7827] return (tmp); VAL [={0:0}, ={0:0}, \result={-759227003976491474:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-759227003976491735:0}, intf={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={-759227003976491474:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6465] RET, EXPR interface_to_usbdev(interface) [L6465] tmp = interface_to_usbdev(interface) [L6466] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8021] CALL ldv_get_dev(ldv_func_arg1) [L8318] DEV_STATE = DEV_STATE + 1 [L8319] return (data); VAL [={0:0}, ={0:0}, \result={-759227003976491474:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, data={-759227003976491474:0}, data={-759227003976491474:0}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8021] RET ldv_get_dev(ldv_func_arg1) [L8022] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-759227003976491474:0}, ldv_func_arg1={-759227003976491474:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6466] RET, EXPR ldv_usb_get_dev_43(tmp) [L6466] tmp___0 = ldv_usb_get_dev_43(tmp) [L6467] udev = tmp___0 [L6468] retval = -12 [L6469] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={-576460752303423419:0}, __constr_expr_1={-576460752303423162:0}, __constr_expr_2={-576460752303423034:0}, __key={-576390383559245499:0}, __key___0={-432275195483389439:0}, __key___1={-576390383559245309:0}, __key___2={-576460752303423164:0}, __key___3={-576460752303423161:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={103:0}, id={103:0}, int_urb={0:0}, INTERF_STATE=0, interface={-759227003976491735:0}, interface={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-759227003976491262:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, product={-759227003976491410:0}, ref_cnt=0, retval=4294967284, serial_number={-432275195483389437:0}, SERIAL_STATE=0, tmp={-759227003976491474:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6469-L6470] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0={0:0}, arg2={-759227003976491262:0}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8574] return __VERIFIER_nondet_int(); [L6469-L6470] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-576460752303423419:0}, __constr_expr_1={-576460752303423162:0}, __constr_expr_2={-576460752303423034:0}, __key={-576390383559245499:0}, __key___0={-432275195483389439:0}, __key___1={-576390383559245309:0}, __key___2={-576460752303423164:0}, __key___3={-576460752303423161:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={103:0}, id={103:0}, int_urb={0:0}, INTERF_STATE=0, interface={-759227003976491735:0}, interface={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-759227003976491262:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, product={-759227003976491410:0}, ref_cnt=0, retval=4294967284, serial_number={-432275195483389437:0}, SERIAL_STATE=0, tmp={-759227003976491474:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=86, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6471] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={-576460752303423419:0}, __constr_expr_1={-576460752303423162:0}, __constr_expr_2={-576460752303423034:0}, __key={-576390383559245499:0}, __key___0={-432275195483389439:0}, __key___1={-576390383559245309:0}, __key___2={-576460752303423164:0}, __key___3={-576460752303423161:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={103:0}, id={103:0}, int_urb={0:0}, INTERF_STATE=0, interface={-759227003976491735:0}, interface={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-759227003976491262:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, product={-759227003976491410:0}, ref_cnt=0, retval=4294967284, serial_number={-432275195483389437:0}, SERIAL_STATE=0, tmp={-759227003976491474:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6471] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0={0:0}, arg2={-759227003976491410:0}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8574] return __VERIFIER_nondet_int(); [L6471] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-576460752303423419:0}, __constr_expr_1={-576460752303423162:0}, __constr_expr_2={-576460752303423034:0}, __key={-576390383559245499:0}, __key___0={-432275195483389439:0}, __key___1={-576390383559245309:0}, __key___2={-576460752303423164:0}, __key___3={-576460752303423161:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={103:0}, id={103:0}, int_urb={0:0}, INTERF_STATE=0, interface={-759227003976491735:0}, interface={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-759227003976491262:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, product={-759227003976491410:0}, ref_cnt=0, retval=4294967284, serial_number={-432275195483389437:0}, SERIAL_STATE=0, tmp={-759227003976491474:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=87, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6472] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={-576460752303423419:0}, __constr_expr_1={-576460752303423162:0}, __constr_expr_2={-576460752303423034:0}, __key={-576390383559245499:0}, __key___0={-432275195483389439:0}, __key___1={-576390383559245309:0}, __key___2={-576460752303423164:0}, __key___3={-576460752303423161:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={103:0}, id={103:0}, int_urb={0:0}, INTERF_STATE=0, interface={-759227003976491735:0}, interface={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-759227003976491262:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, product={-759227003976491410:0}, ref_cnt=0, retval=4294967284, serial_number={-432275195483389437:0}, SERIAL_STATE=0, tmp={-759227003976491474:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6472-L6473] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0={0:0}, arg2={-432275195483389437:0}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8574] return __VERIFIER_nondet_int(); [L6472-L6473] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-576460752303423419:0}, __constr_expr_1={-576460752303423162:0}, __constr_expr_2={-576460752303423034:0}, __key={-576390383559245499:0}, __key___0={-432275195483389439:0}, __key___1={-576390383559245309:0}, __key___2={-576460752303423164:0}, __key___3={-576460752303423161:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={103:0}, id={103:0}, int_urb={0:0}, INTERF_STATE=0, interface={-759227003976491735:0}, interface={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-759227003976491262:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, product={-759227003976491410:0}, ref_cnt=0, retval=4294967284, serial_number={-432275195483389437:0}, SERIAL_STATE=0, tmp={-759227003976491474:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=88, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6475] udev->descriptor.idVendor [L6475] udev->descriptor.idProduct [L6477] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8027] ldv_func_ret_type___10 ldv_func_res ; [L8028] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8030] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8532] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND TRUE tmp___0 != 0 [L4244] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2147483648, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8532] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg0=null, arg1=208, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8532] return ldv_malloc(sizeof(struct urb)); [L8030] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8030] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8031] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8032] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8211] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8032] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8033] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6477] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6477] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6478] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6479] retval = -12 [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, command_out_urb={0:0}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={103:0}, id={103:0}, int_urb={0:0}, INTERF_STATE=0, interface={-759227003976491735:0}, interface={-759227003976491735:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, retval=4294967284, SERIAL_STATE=0, tmp={-759227003976491474:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7619] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7619] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7620] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=7, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7745] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7746] CALL vub300_exit() [L6904] CALL ldv_usb_deregister_60(& vub300_driver) [L8119] FCALL usb_deregister(arg) [L8120] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, arg={-646637013292229056:0}, arg={-646637013292229056:0}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6904] RET ldv_usb_deregister_60(& vub300_driver) [L6905] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8127] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={33816592:-9223301668110597632}, ldv_func_arg1={33816592:-9223301668110597632}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8128] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8128] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={33816592:-9223301668110597632}, ldv_func_arg1={33816592:-9223301668110597632}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6905] RET ldv_flush_workqueue_61(cmndworkqueue) [L6906] CALL ldv_flush_workqueue_62(pollworkqueue) [L8135] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372019607797728:137439215616}, ldv_func_arg1={-9223372019607797728:137439215616}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8136] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8136] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372019607797728:137439215616}, ldv_func_arg1={-9223372019607797728:137439215616}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6906] RET ldv_flush_workqueue_62(pollworkqueue) [L6907] CALL ldv_flush_workqueue_63(deadworkqueue) [L8143] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={2097152:-9223372036586340352}, ldv_func_arg1={2097152:-9223372036586340352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8144] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8144] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={2097152:-9223372036586340352}, ldv_func_arg1={2097152:-9223372036586340352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6907] RET ldv_flush_workqueue_63(deadworkqueue) [L6908] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8151] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={33816592:-9223301668110597632}, ldv_func_arg1={33816592:-9223301668110597632}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8152] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8152] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={33816592:-9223301668110597632}, ldv_func_arg1={33816592:-9223301668110597632}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6908] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6909] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8159] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372019607797728:137439215616}, ldv_func_arg1={-9223372019607797728:137439215616}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8160] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8160] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372019607797728:137439215616}, ldv_func_arg1={-9223372019607797728:137439215616}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6909] RET ldv_destroy_workqueue_65(pollworkqueue) [L6910] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8167] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={2097152:-9223372036586340352}, ldv_func_arg1={2097152:-9223372036586340352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8168] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8168] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={2097152:-9223372036586340352}, ldv_func_arg1={2097152:-9223372036586340352}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L6910] RET ldv_destroy_workqueue_66(deadworkqueue) [L7746] RET vub300_exit() [L7747] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-759227003976491461:0}, ldvarg1={103:0}, ldvarg2={8464145032878284358:0}, ldvarg3={393694500630355263:0}, ldvarg4={524307:0}, ldvarg5={-759227003976491463:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, tmp={103:0}, tmp___0={524307:0}, tmp___1={393694500630355263:0}, tmp___2={8464145032878284358:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L7788] CALL ldv_check_final_state() [L8380] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8384] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8385] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] [L8176] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={86:85}, bulk_urb={0:0}, cmndworkqueue={33816592:-9223301668110597632}, deadworkqueue={2097152:-9223372036586340352}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372019607797728:137439215616}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={-646637013292229056:0}, vub300_driver_group1={-759227003976491735:0}, vub300_mmc_ops={-759227003976491464:0}, vub300_mmc_ops_group0={-829595272755579218:0}, vub300_table={-759227003976491465:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1587 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 107.8s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.5s, AutomataDifference: 35.2s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.0s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 2 mSolverCounterUnknown, 38201 SdHoareTripleChecker+Valid, 24.9s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 37951 mSDsluCounter, 191059 SdHoareTripleChecker+Invalid, 22.8s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 137385 mSDsCounter, 2632 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3509 IncrementalHoareTripleChecker+Invalid, 6143 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2632 mSolverCounterUnsat, 53674 mSDtfsCounter, 3509 mSolverCounterSat, 0.3s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 7687 GetRequests, 7573 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 111 ImplicationChecksByTransitivity, 3.3s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=31913occurred in iteration=15, InterpolantAutomatonStates: 110, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 9.8s AutomataMinimizationTime, 20 MinimizatonAttempts, 18740 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 1.3s SsaConstructionTime, 10.0s SatisfiabilityAnalysisTime, 22.5s InterpolantComputationTime, 4161 NumberOfCodeBlocks, 3966 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 7652 ConstructedInterpolants, 0 QuantifiedInterpolants, 10252 SizeOfPredicates, 21 NumberOfNonLiveVariables, 22282 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 40 InterpolantComputations, 31 PerfectInterpolantSequences, 7144/7230 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-17 02:13:32,680 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample