./Ultimate.py --spec ../../sv-benchmarks/c/properties/unreach-call.prp --file ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i --full-output --architecture 64bit -------------------------------------------------------------------------------- Checking for ERROR reachability Using default analysis Version 53f42b1a Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:04:06,682 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:04:06,686 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:04:06,755 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:04:06,755 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:04:06,762 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:04:06,764 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:04:06,769 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:04:06,772 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:04:06,780 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:04:06,782 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:04:06,784 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:04:06,785 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:04:06,788 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:04:06,792 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:04:06,802 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:04:06,804 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:04:06,806 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:04:06,809 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:04:06,819 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:04:06,822 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:04:06,824 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:04:06,828 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:04:06,830 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:04:06,841 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:04:06,842 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:04:06,843 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:04:06,845 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:04:06,846 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:04:06,849 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:04:06,850 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:04:06,852 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:04:06,854 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:04:06,856 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:04:06,858 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:04:06,859 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:04:06,860 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:04:06,860 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:04:06,860 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:04:06,862 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:04:06,863 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:04:06,864 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Default.epf [2021-11-20 06:04:06,920 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:04:06,920 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:04:06,921 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:04:06,922 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:04:06,927 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:04:06,927 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:04:06,928 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:04:06,929 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:04:06,929 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:04:06,930 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:04:06,931 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-11-20 06:04:06,931 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:04:06,932 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:04:06,932 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:04:06,932 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:04:06,933 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:04:06,933 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:04:06,933 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:04:06,934 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:04:06,934 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:04:06,934 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:04:06,935 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:04:06,935 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:04:06,935 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:04:06,936 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:04:06,936 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-11-20 06:04:06,936 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in [2021-11-20 06:04:06,937 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:04:06,937 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:04:06,939 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:04:06,939 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:04:06,940 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 [2021-11-20 06:04:07,286 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:04:07,327 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:04:07,331 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:04:07,333 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:04:07,334 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:04:07,336 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-20 06:04:07,430 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/105f89a7d/5d38487f08c04f15b4e831709d88a01c/FLAG38d4bf45e [2021-11-20 06:04:08,511 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:04:08,513 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-20 06:04:08,615 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/105f89a7d/5d38487f08c04f15b4e831709d88a01c/FLAG38d4bf45e [2021-11-20 06:04:08,873 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/105f89a7d/5d38487f08c04f15b4e831709d88a01c [2021-11-20 06:04:08,875 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:04:08,877 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:04:08,879 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:04:08,879 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:04:08,884 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:04:08,885 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:04:08" (1/1) ... [2021-11-20 06:04:08,886 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5e116b81 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:08, skipping insertion in model container [2021-11-20 06:04:08,887 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:04:08" (1/1) ... [2021-11-20 06:04:08,895 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:04:09,055 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:04:11,320 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-20 06:04:11,376 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:04:11,420 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:04:11,866 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-20 06:04:11,880 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:04:12,024 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:04:12,025 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12 WrapperNode [2021-11-20 06:04:12,025 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:04:12,027 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:04:12,027 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:04:12,027 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:04:12,037 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,130 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,424 INFO L137 Inliner]: procedures = 260, calls = 1808, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4518 [2021-11-20 06:04:12,425 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:04:12,426 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:04:12,426 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:04:12,426 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:04:12,448 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,448 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,528 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,529 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,705 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,749 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,784 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,823 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:04:12,824 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:04:12,825 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:04:12,825 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:04:12,826 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (1/1) ... [2021-11-20 06:04:12,835 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:04:12,848 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:04:12,862 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:04:12,880 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:04:12,915 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-11-20 06:04:12,916 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-11-20 06:04:12,916 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 06:04:12,916 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 06:04:12,916 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 06:04:12,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 06:04:12,917 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-11-20 06:04:12,917 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-11-20 06:04:12,917 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-11-20 06:04:12,917 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-11-20 06:04:12,918 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-11-20 06:04:12,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-11-20 06:04:12,918 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-11-20 06:04:12,918 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-11-20 06:04:12,918 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-11-20 06:04:12,919 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-11-20 06:04:12,919 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-20 06:04:12,919 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-20 06:04:12,919 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-11-20 06:04:12,919 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-11-20 06:04:12,920 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 06:04:12,920 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 06:04:12,920 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-20 06:04:12,920 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-20 06:04:12,921 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-11-20 06:04:12,921 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-11-20 06:04:12,921 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-11-20 06:04:12,921 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-11-20 06:04:12,921 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-11-20 06:04:12,922 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-11-20 06:04:12,922 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 06:04:12,922 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 06:04:12,922 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 06:04:12,922 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 06:04:12,922 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-11-20 06:04:12,923 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-11-20 06:04:12,923 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 06:04:12,923 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 06:04:12,923 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-11-20 06:04:12,923 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-11-20 06:04:12,924 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-11-20 06:04:12,924 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-11-20 06:04:12,924 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-11-20 06:04:12,924 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-11-20 06:04:12,924 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-11-20 06:04:12,925 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~int~TO~VOID [2021-11-20 06:04:12,925 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-11-20 06:04:12,925 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-11-20 06:04:12,925 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-11-20 06:04:12,925 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-11-20 06:04:12,926 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-11-20 06:04:12,926 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-11-20 06:04:12,926 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 06:04:12,926 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-11-20 06:04:12,926 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-11-20 06:04:12,927 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-11-20 06:04:12,927 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-11-20 06:04:12,927 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-11-20 06:04:12,927 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-11-20 06:04:12,927 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 06:04:12,928 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-11-20 06:04:12,928 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-11-20 06:04:12,928 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-11-20 06:04:12,928 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-11-20 06:04:12,929 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-11-20 06:04:12,929 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-11-20 06:04:12,929 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-11-20 06:04:12,929 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-11-20 06:04:12,929 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-11-20 06:04:12,930 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-11-20 06:04:12,930 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-11-20 06:04:12,930 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-11-20 06:04:12,930 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 06:04:12,930 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 06:04:12,931 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-11-20 06:04:12,931 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-11-20 06:04:12,931 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-11-20 06:04:12,931 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-11-20 06:04:12,931 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-11-20 06:04:12,932 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-11-20 06:04:12,932 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-11-20 06:04:12,932 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-11-20 06:04:12,932 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-11-20 06:04:12,932 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-11-20 06:04:12,933 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-11-20 06:04:12,933 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-11-20 06:04:12,933 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-11-20 06:04:12,933 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-11-20 06:04:12,933 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-11-20 06:04:12,934 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-11-20 06:04:12,934 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-11-20 06:04:12,934 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-11-20 06:04:12,934 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-11-20 06:04:12,934 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-11-20 06:04:12,935 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-20 06:04:13,003 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-20 06:04:13,003 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~int [2021-11-20 06:04:13,003 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-11-20 06:04:13,003 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-11-20 06:04:13,003 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~int [2021-11-20 06:04:13,004 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-11-20 06:04:13,004 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-11-20 06:04:13,004 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-11-20 06:04:13,004 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-11-20 06:04:13,004 INFO L130 BoogieDeclarations]: Found specification of procedure read~int [2021-11-20 06:04:13,004 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-11-20 06:04:13,004 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-11-20 06:04:13,004 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-20 06:04:13,005 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-20 06:04:13,005 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 06:04:13,005 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 06:04:13,005 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-20 06:04:13,005 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-20 06:04:13,005 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-11-20 06:04:13,005 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-11-20 06:04:13,005 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-20 06:04:13,006 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-20 06:04:13,006 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 06:04:13,006 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 06:04:13,006 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-11-20 06:04:13,006 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-11-20 06:04:13,006 INFO L130 BoogieDeclarations]: Found specification of procedure write~int [2021-11-20 06:04:13,006 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-11-20 06:04:13,006 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-11-20 06:04:13,007 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-11-20 06:04:13,007 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-11-20 06:04:13,007 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-11-20 06:04:13,007 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-11-20 06:04:13,007 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 06:04:13,007 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 06:04:13,007 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-11-20 06:04:13,008 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-11-20 06:04:13,008 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-11-20 06:04:13,008 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-11-20 06:04:13,008 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 06:04:13,008 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-11-20 06:04:13,008 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-11-20 06:04:13,008 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-11-20 06:04:13,008 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-11-20 06:04:13,009 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-11-20 06:04:13,009 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-11-20 06:04:13,009 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-11-20 06:04:13,009 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-11-20 06:04:13,009 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-11-20 06:04:13,009 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-11-20 06:04:13,009 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:04:13,009 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-11-20 06:04:13,010 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-11-20 06:04:13,010 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-11-20 06:04:13,010 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-11-20 06:04:13,010 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-11-20 06:04:13,010 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-11-20 06:04:13,010 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-20 06:04:13,010 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-20 06:04:13,010 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 06:04:13,011 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-11-20 06:04:13,011 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-11-20 06:04:13,011 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:04:13,011 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:04:13,011 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-11-20 06:04:13,011 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-11-20 06:04:13,011 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-11-20 06:04:13,011 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-11-20 06:04:13,011 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-11-20 06:04:13,011 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-11-20 06:04:13,012 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-11-20 06:04:13,012 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-11-20 06:04:13,012 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-20 06:04:13,012 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-20 06:04:13,012 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-11-20 06:04:13,012 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-11-20 06:04:13,012 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-11-20 06:04:13,012 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-11-20 06:04:13,012 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-11-20 06:04:13,013 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-11-20 06:04:13,013 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-11-20 06:04:13,013 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-11-20 06:04:13,013 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-11-20 06:04:13,013 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-11-20 06:04:13,013 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-11-20 06:04:13,013 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-11-20 06:04:13,013 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-11-20 06:04:13,013 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-11-20 06:04:13,013 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-11-20 06:04:13,014 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-11-20 06:04:13,014 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~int~TO~VOID [2021-11-20 06:04:13,014 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~int~TO~VOID [2021-11-20 06:04:13,014 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-11-20 06:04:13,014 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-11-20 06:04:13,014 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-20 06:04:13,014 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-20 06:04:13,014 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-11-20 06:04:13,014 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-11-20 06:04:13,014 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-11-20 06:04:13,015 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-11-20 06:04:13,015 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-11-20 06:04:13,015 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-20 06:04:13,015 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-20 06:04:13,015 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-11-20 06:04:13,015 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-11-20 06:04:13,015 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-11-20 06:04:13,015 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-11-20 06:04:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-11-20 06:04:13,016 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:04:13,016 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:04:13,874 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:04:13,883 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:04:15,712 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 06:04:20,518 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:04:20,554 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:04:20,555 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-20 06:04:20,560 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:04:20 BoogieIcfgContainer [2021-11-20 06:04:20,561 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:04:20,563 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:04:20,564 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:04:20,567 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:04:20,568 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:04:08" (1/3) ... [2021-11-20 06:04:20,568 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ace1814 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:04:20, skipping insertion in model container [2021-11-20 06:04:20,569 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:04:12" (2/3) ... [2021-11-20 06:04:20,569 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@6ace1814 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:04:20, skipping insertion in model container [2021-11-20 06:04:20,569 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:04:20" (3/3) ... [2021-11-20 06:04:20,571 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-20 06:04:20,578 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:04:20,579 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:04:20,667 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:04:20,685 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:04:20,687 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:04:20,780 INFO L276 IsEmpty]: Start isEmpty. Operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) [2021-11-20 06:04:20,802 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-20 06:04:20,803 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:04:20,804 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:04:20,804 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:04:20,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:04:20,809 INFO L85 PathProgramCache]: Analyzing trace with hash -1754157023, now seen corresponding path program 1 times [2021-11-20 06:04:20,818 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:04:20,819 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [995211061] [2021-11-20 06:04:20,819 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:04:20,820 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:04:21,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,518 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:04:21,530 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:21,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:21,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:04:21,606 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,648 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:21,650 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,678 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:21,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,692 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:04:21,700 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,732 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:21,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,745 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:21,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,780 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:04:21,789 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,810 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:21,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:21,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,850 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:04:21,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:21,909 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,934 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:04:21,952 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:21,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:21,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:22,015 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-20 06:04:22,016 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:04:22,016 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [995211061] [2021-11-20 06:04:22,017 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [995211061] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:04:22,020 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:04:22,021 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-11-20 06:04:22,023 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [321918812] [2021-11-20 06:04:22,026 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:04:22,033 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:04:22,037 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:04:22,071 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:04:22,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:04:22,080 INFO L87 Difference]: Start difference. First operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:04:29,927 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:04:29,927 INFO L93 Difference]: Finished difference Result 3330 states and 4958 transitions. [2021-11-20 06:04:29,929 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:04:29,931 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-11-20 06:04:29,931 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:04:29,977 INFO L225 Difference]: With dead ends: 3330 [2021-11-20 06:04:29,977 INFO L226 Difference]: Without dead ends: 1732 [2021-11-20 06:04:30,001 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 44 GetRequests, 40 SyntacticMatches, 0 SemanticMatches, 4 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=14, Invalid=16, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:04:30,006 INFO L933 BasicCegarLoop]: 2111 mSDtfsCounter, 1689 mSDsluCounter, 829 mSDsCounter, 0 mSdLazyCounter, 970 mSolverCounterSat, 1522 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 6.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1719 SdHoareTripleChecker+Valid, 2940 SdHoareTripleChecker+Invalid, 2492 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 1522 IncrementalHoareTripleChecker+Valid, 970 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 7.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:04:30,010 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1719 Valid, 2940 Invalid, 2492 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [1522 Valid, 970 Invalid, 0 Unknown, 0 Unchecked, 7.3s Time] [2021-11-20 06:04:30,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1732 states. [2021-11-20 06:04:30,262 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1732 to 1570. [2021-11-20 06:04:30,268 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1570 states, 1102 states have (on average 1.3874773139745917) internal successors, (1529), 1157 states have internal predecessors, (1529), 375 states have call successors, (375), 93 states have call predecessors, (375), 92 states have return successors, (371), 345 states have call predecessors, (371), 371 states have call successors, (371) [2021-11-20 06:04:30,287 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1570 states to 1570 states and 2275 transitions. [2021-11-20 06:04:30,290 INFO L78 Accepts]: Start accepts. Automaton has 1570 states and 2275 transitions. Word has length 114 [2021-11-20 06:04:30,291 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:04:30,291 INFO L470 AbstractCegarLoop]: Abstraction has 1570 states and 2275 transitions. [2021-11-20 06:04:30,291 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 9.6) internal successors, (48), 2 states have internal predecessors, (48), 2 states have call successors, (10), 5 states have call predecessors, (10), 2 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:04:30,292 INFO L276 IsEmpty]: Start isEmpty. Operand 1570 states and 2275 transitions. [2021-11-20 06:04:30,308 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-20 06:04:30,309 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:04:30,309 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:04:30,310 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable0 [2021-11-20 06:04:30,310 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:04:30,311 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:04:30,312 INFO L85 PathProgramCache]: Analyzing trace with hash 340574761, now seen corresponding path program 1 times [2021-11-20 06:04:30,312 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:04:30,312 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1275157982] [2021-11-20 06:04:30,313 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:04:30,313 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:04:30,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,681 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:04:30,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,707 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:30,709 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:30,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:04:30,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,740 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:30,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,747 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:30,748 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:04:30,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,774 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:30,775 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:30,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:04:30,797 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,807 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:30,809 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,816 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:30,817 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:04:30,842 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:30,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:04:30,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:30,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:30,886 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-20 06:04:30,886 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:04:30,886 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1275157982] [2021-11-20 06:04:30,887 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1275157982] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:04:30,887 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:04:30,887 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:04:30,887 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2004985860] [2021-11-20 06:04:30,888 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:04:30,890 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:04:30,890 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:04:30,891 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:04:30,891 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:04:30,891 INFO L87 Difference]: Start difference. First operand 1570 states and 2275 transitions. Second operand has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:04:35,088 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:04:38,596 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.18s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:04:40,814 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.07s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:04:43,454 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.43s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:04:49,358 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:04:49,358 INFO L93 Difference]: Finished difference Result 4978 states and 7479 transitions. [2021-11-20 06:04:49,359 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:04:49,360 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 114 [2021-11-20 06:04:49,361 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:04:49,399 INFO L225 Difference]: With dead ends: 4978 [2021-11-20 06:04:49,400 INFO L226 Difference]: Without dead ends: 3431 [2021-11-20 06:04:49,413 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:04:49,415 INFO L933 BasicCegarLoop]: 2633 mSDtfsCounter, 4041 mSDsluCounter, 3615 mSDsCounter, 0 mSdLazyCounter, 3071 mSolverCounterSat, 2189 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4257 SdHoareTripleChecker+Valid, 6248 SdHoareTripleChecker+Invalid, 5260 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2189 IncrementalHoareTripleChecker+Valid, 3071 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 17.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:04:49,416 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4257 Valid, 6248 Invalid, 5260 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2189 Valid, 3071 Invalid, 0 Unknown, 0 Unchecked, 17.9s Time] [2021-11-20 06:04:49,427 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3431 states. [2021-11-20 06:04:49,661 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3431 to 3138. [2021-11-20 06:04:49,670 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3138 states, 2203 states have (on average 1.3858374943259193) internal successors, (3053), 2313 states have internal predecessors, (3053), 742 states have call successors, (742), 184 states have call predecessors, (742), 192 states have return successors, (790), 694 states have call predecessors, (790), 738 states have call successors, (790) [2021-11-20 06:04:49,702 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3138 states to 3138 states and 4585 transitions. [2021-11-20 06:04:49,704 INFO L78 Accepts]: Start accepts. Automaton has 3138 states and 4585 transitions. Word has length 114 [2021-11-20 06:04:49,708 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:04:49,709 INFO L470 AbstractCegarLoop]: Abstraction has 3138 states and 4585 transitions. [2021-11-20 06:04:49,710 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.0) internal successors, (48), 3 states have internal predecessors, (48), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:04:49,710 INFO L276 IsEmpty]: Start isEmpty. Operand 3138 states and 4585 transitions. [2021-11-20 06:04:49,719 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 116 [2021-11-20 06:04:49,725 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:04:49,726 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:04:49,726 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable1 [2021-11-20 06:04:49,726 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:04:49,727 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:04:49,728 INFO L85 PathProgramCache]: Analyzing trace with hash 1967333887, now seen corresponding path program 1 times [2021-11-20 06:04:49,728 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:04:49,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1182137040] [2021-11-20 06:04:49,729 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:04:49,729 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:04:49,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:49,975 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:04:49,981 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:49,996 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:49,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,004 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:50,006 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:04:50,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,034 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:50,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,043 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:50,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,054 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:04:50,060 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,078 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:50,079 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:50,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:04:50,101 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:50,113 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,120 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:04:50,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,139 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:04:50,148 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,158 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:50,161 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,169 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:04:50,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:04:50,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:04:50,223 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-20 06:04:50,223 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:04:50,224 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1182137040] [2021-11-20 06:04:50,224 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1182137040] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:04:50,224 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:04:50,224 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:04:50,225 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1355948246] [2021-11-20 06:04:50,225 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:04:50,225 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:04:50,226 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:04:50,226 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:04:50,226 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:04:50,227 INFO L87 Difference]: Start difference. First operand 3138 states and 4585 transitions. Second operand has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:04:56,033 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.28s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:05:00,889 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:05:00,889 INFO L93 Difference]: Finished difference Result 9582 states and 14467 transitions. [2021-11-20 06:05:00,890 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:05:00,890 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 115 [2021-11-20 06:05:00,891 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:05:00,963 INFO L225 Difference]: With dead ends: 9582 [2021-11-20 06:05:00,964 INFO L226 Difference]: Without dead ends: 6467 [2021-11-20 06:05:00,993 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 40 GetRequests, 33 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 4 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=29, Invalid=43, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:05:00,999 INFO L933 BasicCegarLoop]: 2338 mSDtfsCounter, 4963 mSDsluCounter, 2590 mSDsCounter, 0 mSdLazyCounter, 1960 mSolverCounterSat, 3173 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 9.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5142 SdHoareTripleChecker+Valid, 4928 SdHoareTripleChecker+Invalid, 5133 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3173 IncrementalHoareTripleChecker+Valid, 1960 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 10.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:05:01,004 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5142 Valid, 4928 Invalid, 5133 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3173 Valid, 1960 Invalid, 0 Unknown, 0 Unchecked, 10.2s Time] [2021-11-20 06:05:01,016 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6467 states. [2021-11-20 06:05:01,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6467 to 5881. [2021-11-20 06:05:01,348 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5881 states, 4130 states have (on average 1.3917675544794188) internal successors, (5748), 4345 states have internal predecessors, (5748), 1383 states have call successors, (1383), 350 states have call predecessors, (1383), 367 states have return successors, (1481), 1291 states have call predecessors, (1481), 1379 states have call successors, (1481) [2021-11-20 06:05:01,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5881 states to 5881 states and 8612 transitions. [2021-11-20 06:05:01,380 INFO L78 Accepts]: Start accepts. Automaton has 5881 states and 8612 transitions. Word has length 115 [2021-11-20 06:05:01,381 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:05:01,381 INFO L470 AbstractCegarLoop]: Abstraction has 5881 states and 8612 transitions. [2021-11-20 06:05:01,381 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.166666666666666) internal successors, (49), 3 states have internal predecessors, (49), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:05:01,381 INFO L276 IsEmpty]: Start isEmpty. Operand 5881 states and 8612 transitions. [2021-11-20 06:05:01,385 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-20 06:05:01,385 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:05:01,386 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:05:01,386 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable2 [2021-11-20 06:05:01,386 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:05:01,386 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:05:01,387 INFO L85 PathProgramCache]: Analyzing trace with hash 857264108, now seen corresponding path program 1 times [2021-11-20 06:05:01,387 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:05:01,387 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1030433913] [2021-11-20 06:05:01,387 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:05:01,388 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:05:01,451 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,549 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:05:01,554 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:01,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:01,578 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,585 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:05:01,591 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,600 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:01,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,610 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:01,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:05:01,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:01,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,643 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:01,644 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,650 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:05:01,659 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:01,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,675 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:01,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:05:01,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,714 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:01,715 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:05:01,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,794 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:01,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:01,802 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-20 06:05:01,803 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:05:01,803 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1030433913] [2021-11-20 06:05:01,803 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1030433913] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:05:01,803 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:05:01,804 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:05:01,804 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [678380430] [2021-11-20 06:05:01,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:05:01,808 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:05:01,809 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:05:01,809 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:05:01,810 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:05:01,811 INFO L87 Difference]: Start difference. First operand 5881 states and 8612 transitions. Second operand has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:05:08,345 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:05:08,345 INFO L93 Difference]: Finished difference Result 6462 states and 9660 transitions. [2021-11-20 06:05:08,348 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:05:08,348 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 116 [2021-11-20 06:05:08,349 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:05:08,412 INFO L225 Difference]: With dead ends: 6462 [2021-11-20 06:05:08,412 INFO L226 Difference]: Without dead ends: 6459 [2021-11-20 06:05:08,418 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:05:08,419 INFO L933 BasicCegarLoop]: 2038 mSDtfsCounter, 3618 mSDsluCounter, 816 mSDsCounter, 0 mSdLazyCounter, 996 mSolverCounterSat, 1838 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3836 SdHoareTripleChecker+Valid, 2854 SdHoareTripleChecker+Invalid, 2834 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1838 IncrementalHoareTripleChecker+Valid, 996 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:05:08,420 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3836 Valid, 2854 Invalid, 2834 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1838 Valid, 996 Invalid, 0 Unknown, 0 Unchecked, 6.2s Time] [2021-11-20 06:05:08,433 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6459 states. [2021-11-20 06:05:08,815 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6459 to 5880. [2021-11-20 06:05:08,830 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5880 states, 4130 states have (on average 1.3915254237288135) internal successors, (5747), 4344 states have internal predecessors, (5747), 1382 states have call successors, (1382), 350 states have call predecessors, (1382), 367 states have return successors, (1481), 1291 states have call predecessors, (1481), 1379 states have call successors, (1481) [2021-11-20 06:05:08,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5880 states to 5880 states and 8610 transitions. [2021-11-20 06:05:08,858 INFO L78 Accepts]: Start accepts. Automaton has 5880 states and 8610 transitions. Word has length 116 [2021-11-20 06:05:08,859 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:05:08,859 INFO L470 AbstractCegarLoop]: Abstraction has 5880 states and 8610 transitions. [2021-11-20 06:05:08,859 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.333333333333334) internal successors, (50), 3 states have internal predecessors, (50), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:05:08,859 INFO L276 IsEmpty]: Start isEmpty. Operand 5880 states and 8610 transitions. [2021-11-20 06:05:08,863 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 118 [2021-11-20 06:05:08,863 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:05:08,864 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:05:08,864 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable3 [2021-11-20 06:05:08,864 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:05:08,864 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:05:08,865 INFO L85 PathProgramCache]: Analyzing trace with hash 804844194, now seen corresponding path program 1 times [2021-11-20 06:05:08,865 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:05:08,865 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1832354447] [2021-11-20 06:05:08,865 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:05:08,865 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:05:08,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:08,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:05:08,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,002 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:09,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:09,009 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,018 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:05:09,023 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:09,032 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,056 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:09,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,063 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:05:09,067 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,074 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:09,075 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,087 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:09,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:05:09,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,104 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:09,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:09,111 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,131 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:05:09,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,144 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:09,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:05:09,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:09,168 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:09,174 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 93 trivial. 0 not checked. [2021-11-20 06:05:09,175 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:05:09,175 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1832354447] [2021-11-20 06:05:09,176 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1832354447] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:05:09,176 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:05:09,176 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2021-11-20 06:05:09,176 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [13871727] [2021-11-20 06:05:09,177 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:05:09,177 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:05:09,177 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:05:09,178 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:05:09,178 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=19, Unknown=0, NotChecked=0, Total=30 [2021-11-20 06:05:09,178 INFO L87 Difference]: Start difference. First operand 5880 states and 8610 transitions. Second operand has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:05:15,861 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.28s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:05:20,064 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.24s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:05:20,771 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:05:20,772 INFO L93 Difference]: Finished difference Result 6461 states and 9658 transitions. [2021-11-20 06:05:20,772 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2021-11-20 06:05:20,773 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) Word has length 117 [2021-11-20 06:05:20,773 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:05:20,828 INFO L225 Difference]: With dead ends: 6461 [2021-11-20 06:05:20,828 INFO L226 Difference]: Without dead ends: 6429 [2021-11-20 06:05:20,836 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 38 GetRequests, 32 SyntacticMatches, 0 SemanticMatches, 6 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 2 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=23, Invalid=33, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:05:20,837 INFO L933 BasicCegarLoop]: 2040 mSDtfsCounter, 3105 mSDsluCounter, 1492 mSDsCounter, 0 mSdLazyCounter, 1678 mSolverCounterSat, 1362 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 10.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3322 SdHoareTripleChecker+Valid, 3532 SdHoareTripleChecker+Invalid, 3040 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1362 IncrementalHoareTripleChecker+Valid, 1678 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 11.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:05:20,838 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3322 Valid, 3532 Invalid, 3040 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1362 Valid, 1678 Invalid, 0 Unknown, 0 Unchecked, 11.2s Time] [2021-11-20 06:05:20,847 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 6429 states. [2021-11-20 06:05:21,163 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 6429 to 5850. [2021-11-20 06:05:21,186 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5850 states, 4114 states have (on average 1.3920758385999028) internal successors, (5727), 4327 states have internal predecessors, (5727), 1369 states have call successors, (1369), 349 states have call predecessors, (1369), 366 states have return successors, (1469), 1279 states have call predecessors, (1469), 1367 states have call successors, (1469) [2021-11-20 06:05:21,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5850 states to 5850 states and 8565 transitions. [2021-11-20 06:05:21,222 INFO L78 Accepts]: Start accepts. Automaton has 5850 states and 8565 transitions. Word has length 117 [2021-11-20 06:05:21,223 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:05:21,223 INFO L470 AbstractCegarLoop]: Abstraction has 5850 states and 8565 transitions. [2021-11-20 06:05:21,224 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 6 states have (on average 8.5) internal successors, (51), 3 states have internal predecessors, (51), 3 states have call successors, (10), 5 states have call predecessors, (10), 1 states have return successors, (9), 2 states have call predecessors, (9), 2 states have call successors, (9) [2021-11-20 06:05:21,225 INFO L276 IsEmpty]: Start isEmpty. Operand 5850 states and 8565 transitions. [2021-11-20 06:05:21,237 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 170 [2021-11-20 06:05:21,237 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:05:21,238 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:05:21,238 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable4 [2021-11-20 06:05:21,238 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:05:21,239 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:05:21,239 INFO L85 PathProgramCache]: Analyzing trace with hash 604265189, now seen corresponding path program 1 times [2021-11-20 06:05:21,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:05:21,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [4808824] [2021-11-20 06:05:21,240 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:05:21,240 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:05:21,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:05:21,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:21,413 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:21,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,425 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:05:21,427 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:21,435 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:21,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,447 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:05:21,449 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,456 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:21,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:21,463 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,468 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:05:21,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,481 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:21,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,488 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:21,489 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:05:21,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:21,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:05:21,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:21,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,608 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 99 [2021-11-20 06:05:21,611 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 110 [2021-11-20 06:05:21,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,627 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-11-20 06:05:21,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 120 [2021-11-20 06:05:21,657 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,664 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 125 [2021-11-20 06:05:21,667 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,674 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:21,676 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-11-20 06:05:21,693 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:21,701 INFO L134 CoverageAnalysis]: Checked inductivity of 110 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 106 trivial. 0 not checked. [2021-11-20 06:05:21,701 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:05:21,702 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [4808824] [2021-11-20 06:05:21,702 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [4808824] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:05:21,702 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:05:21,702 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:05:21,703 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [566592762] [2021-11-20 06:05:21,703 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:05:21,704 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:05:21,704 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:05:21,705 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:05:21,705 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:05:21,705 INFO L87 Difference]: Start difference. First operand 5850 states and 8565 transitions. Second operand has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 06:05:40,975 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:05:40,975 INFO L93 Difference]: Finished difference Result 20074 states and 30434 transitions. [2021-11-20 06:05:40,976 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-20 06:05:40,976 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) Word has length 169 [2021-11-20 06:05:40,976 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:05:41,066 INFO L225 Difference]: With dead ends: 20074 [2021-11-20 06:05:41,067 INFO L226 Difference]: Without dead ends: 14247 [2021-11-20 06:05:41,108 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 69 GetRequests, 52 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 63 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-11-20 06:05:41,109 INFO L933 BasicCegarLoop]: 2266 mSDtfsCounter, 6463 mSDsluCounter, 4891 mSDsCounter, 0 mSdLazyCounter, 5944 mSolverCounterSat, 5103 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 16.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6790 SdHoareTripleChecker+Valid, 7157 SdHoareTripleChecker+Invalid, 11047 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 5103 IncrementalHoareTripleChecker+Valid, 5944 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 18.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:05:41,110 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6790 Valid, 7157 Invalid, 11047 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [5103 Valid, 5944 Invalid, 0 Unknown, 0 Unchecked, 18.4s Time] [2021-11-20 06:05:41,134 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 14247 states. [2021-11-20 06:05:41,979 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 14247 to 12562. [2021-11-20 06:05:41,996 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12562 states, 8738 states have (on average 1.384641794460975) internal successors, (12099), 9249 states have internal predecessors, (12099), 2943 states have call successors, (2943), 677 states have call predecessors, (2943), 880 states have return successors, (3810), 2917 states have call predecessors, (3810), 2941 states have call successors, (3810) [2021-11-20 06:05:42,071 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12562 states to 12562 states and 18852 transitions. [2021-11-20 06:05:42,074 INFO L78 Accepts]: Start accepts. Automaton has 12562 states and 18852 transitions. Word has length 169 [2021-11-20 06:05:42,075 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:05:42,075 INFO L470 AbstractCegarLoop]: Abstraction has 12562 states and 18852 transitions. [2021-11-20 06:05:42,075 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 10.25) internal successors, (82), 3 states have internal predecessors, (82), 2 states have call successors, (17), 7 states have call predecessors, (17), 1 states have return successors, (16), 2 states have call predecessors, (16), 2 states have call successors, (16) [2021-11-20 06:05:42,076 INFO L276 IsEmpty]: Start isEmpty. Operand 12562 states and 18852 transitions. [2021-11-20 06:05:42,111 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 209 [2021-11-20 06:05:42,111 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:05:42,112 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:05:42,112 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable5 [2021-11-20 06:05:42,112 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:05:42,113 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:05:42,113 INFO L85 PathProgramCache]: Analyzing trace with hash -563103977, now seen corresponding path program 1 times [2021-11-20 06:05:42,113 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:05:42,113 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1948515052] [2021-11-20 06:05:42,114 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:05:42,114 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:05:42,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:05:42,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,332 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:42,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,344 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:05:42,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,355 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,356 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:42,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,368 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:05:42,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,386 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:42,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,393 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:05:42,396 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,403 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,410 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:42,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,430 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:05:42,433 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,440 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:05:42,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,458 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,465 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-20 06:05:42,467 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,475 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,476 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,482 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:05:42,483 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,501 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 138 [2021-11-20 06:05:42,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,510 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 149 [2021-11-20 06:05:42,513 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,520 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 154 [2021-11-20 06:05:42,525 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-11-20 06:05:42,534 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,540 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 164 [2021-11-20 06:05:42,544 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,550 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:05:42,552 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,566 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 175 [2021-11-20 06:05:42,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:05:42,576 INFO L134 CoverageAnalysis]: Checked inductivity of 187 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 167 trivial. 0 not checked. [2021-11-20 06:05:42,577 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:05:42,577 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1948515052] [2021-11-20 06:05:42,577 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1948515052] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:05:42,577 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:05:42,578 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2021-11-20 06:05:42,578 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [783712857] [2021-11-20 06:05:42,578 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:05:42,579 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 9 states [2021-11-20 06:05:42,579 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:05:42,580 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2021-11-20 06:05:42,580 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=18, Invalid=54, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:05:42,580 INFO L87 Difference]: Start difference. First operand 12562 states and 18852 transitions. Second operand has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-20 06:05:52,160 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.75s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:05:53,709 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.55s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:06:00,348 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:06:00,349 INFO L93 Difference]: Finished difference Result 29123 states and 44848 transitions. [2021-11-20 06:06:00,349 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 06:06:00,349 INFO L78 Accepts]: Start accepts. Automaton has has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) Word has length 208 [2021-11-20 06:06:00,353 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:06:00,468 INFO L225 Difference]: With dead ends: 29123 [2021-11-20 06:06:00,468 INFO L226 Difference]: Without dead ends: 16584 [2021-11-20 06:06:00,538 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 71 GetRequests, 55 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 45 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=81, Invalid=225, Unknown=0, NotChecked=0, Total=306 [2021-11-20 06:06:00,539 INFO L933 BasicCegarLoop]: 2345 mSDtfsCounter, 5710 mSDsluCounter, 5558 mSDsCounter, 0 mSdLazyCounter, 4774 mSolverCounterSat, 4436 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5976 SdHoareTripleChecker+Valid, 7903 SdHoareTripleChecker+Invalid, 9210 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 4436 IncrementalHoareTripleChecker+Valid, 4774 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:06:00,539 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5976 Valid, 7903 Invalid, 9210 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [4436 Valid, 4774 Invalid, 0 Unknown, 0 Unchecked, 16.8s Time] [2021-11-20 06:06:00,567 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16584 states. [2021-11-20 06:06:01,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16584 to 12576. [2021-11-20 06:06:01,500 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 12576 states, 8752 states have (on average 1.384026508226691) internal successors, (12113), 9263 states have internal predecessors, (12113), 2943 states have call successors, (2943), 677 states have call predecessors, (2943), 880 states have return successors, (3810), 2917 states have call predecessors, (3810), 2941 states have call successors, (3810) [2021-11-20 06:06:01,564 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12576 states to 12576 states and 18866 transitions. [2021-11-20 06:06:01,570 INFO L78 Accepts]: Start accepts. Automaton has 12576 states and 18866 transitions. Word has length 208 [2021-11-20 06:06:01,570 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:06:01,571 INFO L470 AbstractCegarLoop]: Abstraction has 12576 states and 18866 transitions. [2021-11-20 06:06:01,571 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 9 states, 9 states have (on average 11.444444444444445) internal successors, (103), 4 states have internal predecessors, (103), 2 states have call successors, (18), 7 states have call predecessors, (18), 1 states have return successors, (17), 2 states have call predecessors, (17), 2 states have call successors, (17) [2021-11-20 06:06:01,571 INFO L276 IsEmpty]: Start isEmpty. Operand 12576 states and 18866 transitions. [2021-11-20 06:06:01,599 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 226 [2021-11-20 06:06:01,600 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:06:01,600 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:06:01,600 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable6 [2021-11-20 06:06:01,600 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:06:01,601 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:06:01,601 INFO L85 PathProgramCache]: Analyzing trace with hash -37150978, now seen corresponding path program 1 times [2021-11-20 06:06:01,601 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:06:01,601 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [112519113] [2021-11-20 06:06:01,602 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:06:01,602 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:06:01,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,846 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:06:01,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,860 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:01,861 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:01,867 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,873 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:06:01,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,883 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:01,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,890 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:01,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,897 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:06:01,899 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,906 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:01,907 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,914 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:01,915 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:06:01,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,932 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:01,933 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,938 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:01,938 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:01,952 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:06:02,088 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,093 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:02,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,109 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:06:02,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,118 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:02,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-20 06:06:02,128 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,135 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:02,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:02,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-11-20 06:06:02,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,165 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:02,166 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:02,172 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,190 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-11-20 06:06:02,193 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-20 06:06:02,203 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,209 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-11-20 06:06:02,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-20 06:06:02,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,228 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-20 06:06:02,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,237 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:02,239 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-20 06:06:02,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:02,261 INFO L134 CoverageAnalysis]: Checked inductivity of 257 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 236 trivial. 0 not checked. [2021-11-20 06:06:02,262 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:06:02,262 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [112519113] [2021-11-20 06:06:02,262 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [112519113] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:06:02,262 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:06:02,263 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2021-11-20 06:06:02,263 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1584394517] [2021-11-20 06:06:02,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:06:02,264 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:06:02,264 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:06:02,264 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:06:02,265 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:06:02,265 INFO L87 Difference]: Start difference. First operand 12576 states and 18866 transitions. Second operand has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:06:23,302 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.03s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:06:26,162 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:06:26,163 INFO L93 Difference]: Finished difference Result 40481 states and 61702 transitions. [2021-11-20 06:06:26,163 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-20 06:06:26,163 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 225 [2021-11-20 06:06:26,164 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:06:26,357 INFO L225 Difference]: With dead ends: 40481 [2021-11-20 06:06:26,357 INFO L226 Difference]: Without dead ends: 27928 [2021-11-20 06:06:26,418 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 81 GetRequests, 64 SyntacticMatches, 0 SemanticMatches, 17 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 62 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=99, Invalid=243, Unknown=0, NotChecked=0, Total=342 [2021-11-20 06:06:26,419 INFO L933 BasicCegarLoop]: 3454 mSDtfsCounter, 5428 mSDsluCounter, 6085 mSDsCounter, 0 mSdLazyCounter, 6732 mSolverCounterSat, 5184 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 20.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5789 SdHoareTripleChecker+Valid, 9539 SdHoareTripleChecker+Invalid, 11916 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 5184 IncrementalHoareTripleChecker+Valid, 6732 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 22.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:06:26,420 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5789 Valid, 9539 Invalid, 11916 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [5184 Valid, 6732 Invalid, 0 Unknown, 0 Unchecked, 22.4s Time] [2021-11-20 06:06:26,453 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27928 states. [2021-11-20 06:06:28,226 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27928 to 24675. [2021-11-20 06:06:28,261 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 24675 states, 17196 states have (on average 1.3851477087694812) internal successors, (23819), 18197 states have internal predecessors, (23819), 5743 states have call successors, (5743), 1328 states have call predecessors, (5743), 1735 states have return successors, (7471), 5693 states have call predecessors, (7471), 5741 states have call successors, (7471) [2021-11-20 06:06:28,520 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24675 states to 24675 states and 37033 transitions. [2021-11-20 06:06:28,526 INFO L78 Accepts]: Start accepts. Automaton has 24675 states and 37033 transitions. Word has length 225 [2021-11-20 06:06:28,527 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:06:28,527 INFO L470 AbstractCegarLoop]: Abstraction has 24675 states and 37033 transitions. [2021-11-20 06:06:28,527 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 13.125) internal successors, (105), 3 states have internal predecessors, (105), 3 states have call successors, (19), 7 states have call predecessors, (19), 1 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:06:28,527 INFO L276 IsEmpty]: Start isEmpty. Operand 24675 states and 37033 transitions. [2021-11-20 06:06:28,598 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 252 [2021-11-20 06:06:28,598 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:06:28,598 INFO L514 BasicCegarLoop]: trace histogram [5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:06:28,599 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable7 [2021-11-20 06:06:28,599 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:06:28,599 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:06:28,600 INFO L85 PathProgramCache]: Analyzing trace with hash -67567646, now seen corresponding path program 1 times [2021-11-20 06:06:28,600 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:06:28,600 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1031386438] [2021-11-20 06:06:28,600 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:06:28,601 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:06:28,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:06:29,028 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,047 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:29,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,069 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:06:29,072 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,083 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,084 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,089 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:29,090 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,095 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:06:29,098 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,105 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,106 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,111 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:29,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,117 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:06:29,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,126 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,127 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,133 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:29,134 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:06:29,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,163 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,164 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,170 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:06:29,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,179 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,189 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-20 06:06:29,191 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,198 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,205 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:29,205 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 129 [2021-11-20 06:06:29,213 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 133 [2021-11-20 06:06:29,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 143 [2021-11-20 06:06:29,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 147 [2021-11-20 06:06:29,284 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-11-20 06:06:29,294 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-11-20 06:06:29,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,324 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-20 06:06:29,327 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,333 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-20 06:06:29,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,341 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 197 [2021-11-20 06:06:29,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-11-20 06:06:29,355 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 207 [2021-11-20 06:06:29,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,370 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:29,371 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,387 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 218 [2021-11-20 06:06:29,390 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:29,397 INFO L134 CoverageAnalysis]: Checked inductivity of 218 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 196 trivial. 0 not checked. [2021-11-20 06:06:29,397 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:06:29,397 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1031386438] [2021-11-20 06:06:29,398 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1031386438] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:06:29,398 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:06:29,398 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [11] imperfect sequences [] total 11 [2021-11-20 06:06:29,398 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [387729042] [2021-11-20 06:06:29,399 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:06:29,400 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-20 06:06:29,400 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:06:29,401 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-20 06:06:29,401 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=25, Invalid=85, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:06:29,401 INFO L87 Difference]: Start difference. First operand 24675 states and 37033 transitions. Second operand has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-11-20 06:06:43,066 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.04s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:06:52,418 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:06:52,419 INFO L93 Difference]: Finished difference Result 42234 states and 63906 transitions. [2021-11-20 06:06:52,420 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2021-11-20 06:06:52,420 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) Word has length 251 [2021-11-20 06:06:52,421 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:06:52,544 INFO L225 Difference]: With dead ends: 42234 [2021-11-20 06:06:52,544 INFO L226 Difference]: Without dead ends: 17371 [2021-11-20 06:06:52,636 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 79 GetRequests, 63 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 32 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=78, Invalid=228, Unknown=0, NotChecked=0, Total=306 [2021-11-20 06:06:52,640 INFO L933 BasicCegarLoop]: 1996 mSDtfsCounter, 2404 mSDsluCounter, 7637 mSDsCounter, 0 mSdLazyCounter, 7608 mSolverCounterSat, 2189 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2544 SdHoareTripleChecker+Valid, 9633 SdHoareTripleChecker+Invalid, 9797 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2189 IncrementalHoareTripleChecker+Valid, 7608 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 21.6s IncrementalHoareTripleChecker+Time [2021-11-20 06:06:52,641 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2544 Valid, 9633 Invalid, 9797 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2189 Valid, 7608 Invalid, 0 Unknown, 0 Unchecked, 21.6s Time] [2021-11-20 06:06:52,659 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17371 states. [2021-11-20 06:06:53,861 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17371 to 15289. [2021-11-20 06:06:53,879 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15289 states, 10641 states have (on average 1.3824828493562635) internal successors, (14711), 11263 states have internal predecessors, (14711), 3559 states have call successors, (3559), 834 states have call predecessors, (3559), 1088 states have return successors, (4632), 3525 states have call predecessors, (4632), 3557 states have call successors, (4632) [2021-11-20 06:06:53,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15289 states to 15289 states and 22902 transitions. [2021-11-20 06:06:53,990 INFO L78 Accepts]: Start accepts. Automaton has 15289 states and 22902 transitions. Word has length 251 [2021-11-20 06:06:53,991 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:06:53,991 INFO L470 AbstractCegarLoop]: Abstraction has 15289 states and 22902 transitions. [2021-11-20 06:06:53,991 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 11 states have (on average 10.727272727272727) internal successors, (118), 5 states have internal predecessors, (118), 3 states have call successors, (24), 8 states have call predecessors, (24), 1 states have return successors, (23), 3 states have call predecessors, (23), 3 states have call successors, (23) [2021-11-20 06:06:53,991 INFO L276 IsEmpty]: Start isEmpty. Operand 15289 states and 22902 transitions. [2021-11-20 06:06:54,055 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 282 [2021-11-20 06:06:54,055 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:06:54,056 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:06:54,056 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable8 [2021-11-20 06:06:54,056 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:06:54,056 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:06:54,057 INFO L85 PathProgramCache]: Analyzing trace with hash 214519940, now seen corresponding path program 1 times [2021-11-20 06:06:54,057 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:06:54,057 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [947341339] [2021-11-20 06:06:54,057 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:06:54,058 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:06:54,124 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,245 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:06:54,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,270 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:54,270 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,276 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:06:54,278 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,285 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,286 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,291 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:54,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,301 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:06:54,303 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,309 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:54,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:06:54,323 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,454 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,455 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,473 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:54,474 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,491 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:06:54,494 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,500 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,501 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,507 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:06:54,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,517 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 100 [2021-11-20 06:06:54,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:06:54,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:54,691 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,698 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:06:54,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:06:54,712 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:06:54,722 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,729 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:06:54,736 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,756 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,761 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 06:06:54,762 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:06:54,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,781 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:06:54,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,805 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,813 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,829 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:06:54,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,837 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-20 06:06:54,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,843 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 06:06:54,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,852 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-20 06:06:54,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:06:54,859 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,886 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-20 06:06:54,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:06:54,912 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,918 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:06:54,918 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,923 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:06:54,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,929 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-20 06:06:54,930 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,935 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-20 06:06:54,936 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:06:54,942 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-20 06:06:54,943 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:06:54,943 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [947341339] [2021-11-20 06:06:54,943 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [947341339] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:06:54,943 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:06:54,943 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-20 06:06:54,944 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2058403230] [2021-11-20 06:06:54,944 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:06:54,945 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-20 06:06:54,945 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:06:54,945 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-20 06:06:54,945 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:06:54,946 INFO L87 Difference]: Start difference. First operand 15289 states and 22902 transitions. Second operand has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:07:05,008 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.01s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:07:16,139 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:07:16,139 INFO L93 Difference]: Finished difference Result 32633 states and 49455 transitions. [2021-11-20 06:07:16,140 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 06:07:16,140 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 281 [2021-11-20 06:07:16,140 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:07:16,257 INFO L225 Difference]: With dead ends: 32633 [2021-11-20 06:07:16,257 INFO L226 Difference]: Without dead ends: 17377 [2021-11-20 06:07:16,326 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-20 06:07:16,327 INFO L933 BasicCegarLoop]: 1864 mSDtfsCounter, 3968 mSDsluCounter, 3882 mSDsCounter, 0 mSdLazyCounter, 5978 mSolverCounterSat, 2459 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 18.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4247 SdHoareTripleChecker+Valid, 5746 SdHoareTripleChecker+Invalid, 8437 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2459 IncrementalHoareTripleChecker+Valid, 5978 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 19.8s IncrementalHoareTripleChecker+Time [2021-11-20 06:07:16,329 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4247 Valid, 5746 Invalid, 8437 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2459 Valid, 5978 Invalid, 0 Unknown, 0 Unchecked, 19.8s Time] [2021-11-20 06:07:16,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17377 states. [2021-11-20 06:07:17,669 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17377 to 15269. [2021-11-20 06:07:17,681 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15269 states, 10631 states have (on average 1.3819019847615464) internal successors, (14691), 11253 states have internal predecessors, (14691), 3549 states have call successors, (3549), 834 states have call predecessors, (3549), 1088 states have return successors, (4602), 3515 states have call predecessors, (4602), 3547 states have call successors, (4602) [2021-11-20 06:07:17,743 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15269 states to 15269 states and 22842 transitions. [2021-11-20 06:07:17,749 INFO L78 Accepts]: Start accepts. Automaton has 15269 states and 22842 transitions. Word has length 281 [2021-11-20 06:07:17,750 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:07:17,750 INFO L470 AbstractCegarLoop]: Abstraction has 15269 states and 22842 transitions. [2021-11-20 06:07:17,750 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.076923076923077) internal successors, (157), 5 states have internal predecessors, (157), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:07:17,751 INFO L276 IsEmpty]: Start isEmpty. Operand 15269 states and 22842 transitions. [2021-11-20 06:07:17,787 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 284 [2021-11-20 06:07:17,787 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:07:17,788 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:07:17,788 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable9 [2021-11-20 06:07:17,788 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:07:17,789 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:07:17,789 INFO L85 PathProgramCache]: Analyzing trace with hash 1218724741, now seen corresponding path program 1 times [2021-11-20 06:07:17,789 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:07:17,789 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [415086695] [2021-11-20 06:07:17,790 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:07:17,790 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:07:17,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:17,997 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:07:17,999 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,015 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,203 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:18,204 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,211 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:07:18,214 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,230 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:18,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:07:18,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,251 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,257 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:18,258 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,263 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:07:18,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,272 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,273 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,278 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:18,279 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:07:18,300 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,328 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:07:18,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,339 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,392 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 102 [2021-11-20 06:07:18,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,469 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:07:18,471 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,496 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:18,498 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,506 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:18,507 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,512 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:07:18,515 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,525 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:07:18,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:07:18,540 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,560 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 06:07:18,567 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,573 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:18,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,582 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:07:18,585 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,609 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,615 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,633 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:18,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,640 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-20 06:07:18,641 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 06:07:18,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-20 06:07:18,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,659 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:07:18,660 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-20 06:07:18,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,700 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,713 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:18,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,720 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:18,721 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,726 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:07:18,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,733 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-20 06:07:18,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,739 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-20 06:07:18,740 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:18,747 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-20 06:07:18,747 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:07:18,747 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [415086695] [2021-11-20 06:07:18,747 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [415086695] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:07:18,748 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:07:18,748 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-20 06:07:18,748 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1693027580] [2021-11-20 06:07:18,748 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:07:18,750 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-20 06:07:18,750 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:07:18,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-20 06:07:18,752 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:07:18,752 INFO L87 Difference]: Start difference. First operand 15269 states and 22842 transitions. Second operand has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:07:35,680 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:07:35,681 INFO L93 Difference]: Finished difference Result 32593 states and 49330 transitions. [2021-11-20 06:07:35,681 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 06:07:35,681 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 283 [2021-11-20 06:07:35,682 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:07:35,763 INFO L225 Difference]: With dead ends: 32593 [2021-11-20 06:07:35,764 INFO L226 Difference]: Without dead ends: 17357 [2021-11-20 06:07:35,810 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-20 06:07:35,810 INFO L933 BasicCegarLoop]: 1855 mSDtfsCounter, 6053 mSDsluCounter, 3348 mSDsCounter, 0 mSdLazyCounter, 4841 mSolverCounterSat, 4739 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.8s Time, 0 mProtectedPredicate, 0 mProtectedAction, 6327 SdHoareTripleChecker+Valid, 5203 SdHoareTripleChecker+Invalid, 9580 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 4739 IncrementalHoareTripleChecker+Valid, 4841 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:07:35,811 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [6327 Valid, 5203 Invalid, 9580 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [4739 Valid, 4841 Invalid, 0 Unknown, 0 Unchecked, 15.4s Time] [2021-11-20 06:07:35,829 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17357 states. [2021-11-20 06:07:36,845 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17357 to 15249. [2021-11-20 06:07:36,858 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15249 states, 10621 states have (on average 1.381320026362866) internal successors, (14671), 11243 states have internal predecessors, (14671), 3539 states have call successors, (3539), 834 states have call predecessors, (3539), 1088 states have return successors, (4572), 3505 states have call predecessors, (4572), 3537 states have call successors, (4572) [2021-11-20 06:07:36,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15249 states to 15249 states and 22782 transitions. [2021-11-20 06:07:36,920 INFO L78 Accepts]: Start accepts. Automaton has 15249 states and 22782 transitions. Word has length 283 [2021-11-20 06:07:36,920 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:07:36,920 INFO L470 AbstractCegarLoop]: Abstraction has 15249 states and 22782 transitions. [2021-11-20 06:07:36,921 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.23076923076923) internal successors, (159), 5 states have internal predecessors, (159), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:07:36,921 INFO L276 IsEmpty]: Start isEmpty. Operand 15249 states and 22782 transitions. [2021-11-20 06:07:36,961 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 285 [2021-11-20 06:07:36,961 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:07:36,962 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:07:36,962 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable10 [2021-11-20 06:07:36,963 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:07:36,963 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:07:36,963 INFO L85 PathProgramCache]: Analyzing trace with hash 1511917438, now seen corresponding path program 1 times [2021-11-20 06:07:36,964 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:07:36,964 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1311444250] [2021-11-20 06:07:36,964 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:07:36,964 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:07:37,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,154 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:07:37,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,310 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,312 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,316 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:37,317 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,322 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:07:37,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,330 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,330 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,335 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:37,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:07:37,342 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,351 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,352 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:37,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:07:37,363 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,369 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:37,374 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,389 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:07:37,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,396 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,397 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,402 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:07:37,404 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,409 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,410 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,466 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 103 [2021-11-20 06:07:37,495 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,530 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:07:37,531 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,552 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:37,553 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,559 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:37,559 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,564 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:07:37,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,574 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:07:37,575 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:07:37,587 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,601 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,602 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 06:07:37,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,613 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:37,615 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,621 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:07:37,624 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,654 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,670 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:37,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,676 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-20 06:07:37,677 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,682 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 06:07:37,683 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,688 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-20 06:07:37,689 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:07:37,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-20 06:07:37,720 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,728 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,730 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:37,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:37,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:07:37,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,755 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-20 06:07:37,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,760 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-20 06:07:37,760 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:37,766 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-20 06:07:37,766 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:07:37,766 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1311444250] [2021-11-20 06:07:37,766 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1311444250] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:07:37,768 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:07:37,768 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-20 06:07:37,769 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1980005222] [2021-11-20 06:07:37,769 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:07:37,770 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-20 06:07:37,771 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:07:37,771 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-20 06:07:37,771 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:07:37,772 INFO L87 Difference]: Start difference. First operand 15249 states and 22782 transitions. Second operand has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:07:54,350 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:07:54,351 INFO L93 Difference]: Finished difference Result 32553 states and 49205 transitions. [2021-11-20 06:07:54,351 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 06:07:54,351 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 284 [2021-11-20 06:07:54,352 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:07:54,419 INFO L225 Difference]: With dead ends: 32553 [2021-11-20 06:07:54,419 INFO L226 Difference]: Without dead ends: 17337 [2021-11-20 06:07:54,456 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-20 06:07:54,457 INFO L933 BasicCegarLoop]: 1852 mSDtfsCounter, 4949 mSDsluCounter, 3333 mSDsCounter, 0 mSdLazyCounter, 4983 mSolverCounterSat, 3184 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 13.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5221 SdHoareTripleChecker+Valid, 5185 SdHoareTripleChecker+Invalid, 8167 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3184 IncrementalHoareTripleChecker+Valid, 4983 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:07:54,457 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5221 Valid, 5185 Invalid, 8167 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3184 Valid, 4983 Invalid, 0 Unknown, 0 Unchecked, 15.0s Time] [2021-11-20 06:07:54,475 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17337 states. [2021-11-20 06:07:55,389 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17337 to 15229. [2021-11-20 06:07:55,402 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15229 states, 10611 states have (on average 1.38073697106776) internal successors, (14651), 11233 states have internal predecessors, (14651), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1088 states have return successors, (4542), 3495 states have call predecessors, (4542), 3527 states have call successors, (4542) [2021-11-20 06:07:55,458 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15229 states to 15229 states and 22722 transitions. [2021-11-20 06:07:55,464 INFO L78 Accepts]: Start accepts. Automaton has 15229 states and 22722 transitions. Word has length 284 [2021-11-20 06:07:55,464 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:07:55,465 INFO L470 AbstractCegarLoop]: Abstraction has 15229 states and 22722 transitions. [2021-11-20 06:07:55,465 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.307692307692308) internal successors, (160), 5 states have internal predecessors, (160), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:07:55,465 INFO L276 IsEmpty]: Start isEmpty. Operand 15229 states and 22722 transitions. [2021-11-20 06:07:55,500 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 283 [2021-11-20 06:07:55,501 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:07:55,501 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:07:55,501 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable11 [2021-11-20 06:07:55,502 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:07:55,502 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:07:55,502 INFO L85 PathProgramCache]: Analyzing trace with hash -2007024995, now seen corresponding path program 1 times [2021-11-20 06:07:55,502 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:07:55,503 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1901196186] [2021-11-20 06:07:55,503 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:07:55,503 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:07:55,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,694 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:07:55,696 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,709 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:55,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,716 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:55,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,721 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:07:55,724 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,731 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:55,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,737 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:55,738 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,748 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:07:55,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,756 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:55,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,762 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:55,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,768 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:07:55,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:55,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:55,783 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,802 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:07:55,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:55,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,821 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:07:55,824 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,830 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:55,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:55,885 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 101 [2021-11-20 06:07:55,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,086 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:07:56,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:56,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,121 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:56,122 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,129 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 21 [2021-11-20 06:07:56,132 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,142 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:07:56,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,148 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 41 [2021-11-20 06:07:56,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,172 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:56,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,180 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 7 [2021-11-20 06:07:56,182 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,187 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:56,189 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,195 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:07:56,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:56,223 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,230 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:56,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,253 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 12 [2021-11-20 06:07:56,254 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,261 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 90 [2021-11-20 06:07:56,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,267 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 95 [2021-11-20 06:07:56,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,273 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 106 [2021-11-20 06:07:56,274 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,280 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:07:56,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,308 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 116 [2021-11-20 06:07:56,311 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,321 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:56,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,334 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:07:56,335 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,340 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:07:56,341 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,346 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 11 [2021-11-20 06:07:56,347 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,352 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 16 [2021-11-20 06:07:56,353 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,358 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 25 [2021-11-20 06:07:56,358 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:07:56,365 INFO L134 CoverageAnalysis]: Checked inductivity of 113 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 108 trivial. 0 not checked. [2021-11-20 06:07:56,365 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:07:56,365 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1901196186] [2021-11-20 06:07:56,365 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1901196186] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:07:56,366 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:07:56,366 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2021-11-20 06:07:56,366 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1397936572] [2021-11-20 06:07:56,366 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:07:56,367 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-20 06:07:56,367 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:07:56,368 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-20 06:07:56,368 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=43, Invalid=113, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:07:56,368 INFO L87 Difference]: Start difference. First operand 15229 states and 22722 transitions. Second operand has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:07:59,959 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.17s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:08:01,391 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.43s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:08:13,243 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:08:13,244 INFO L93 Difference]: Finished difference Result 32513 states and 49080 transitions. [2021-11-20 06:08:13,245 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2021-11-20 06:08:13,246 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) Word has length 282 [2021-11-20 06:08:13,246 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:08:13,322 INFO L225 Difference]: With dead ends: 32513 [2021-11-20 06:08:13,322 INFO L226 Difference]: Without dead ends: 17317 [2021-11-20 06:08:13,366 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 103 GetRequests, 84 SyntacticMatches, 0 SemanticMatches, 19 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 89 ImplicationChecksByTransitivity, 0.3s TimeCoverageRelationStatistics Valid=116, Invalid=304, Unknown=0, NotChecked=0, Total=420 [2021-11-20 06:08:13,367 INFO L933 BasicCegarLoop]: 1909 mSDtfsCounter, 5331 mSDsluCounter, 3426 mSDsCounter, 0 mSdLazyCounter, 4928 mSolverCounterSat, 4011 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 14.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 5598 SdHoareTripleChecker+Valid, 5335 SdHoareTripleChecker+Invalid, 8939 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 4011 IncrementalHoareTripleChecker+Valid, 4928 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 15.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:08:13,367 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [5598 Valid, 5335 Invalid, 8939 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [4011 Valid, 4928 Invalid, 0 Unknown, 0 Unchecked, 15.5s Time] [2021-11-20 06:08:13,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17317 states. [2021-11-20 06:08:14,370 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17317 to 15209. [2021-11-20 06:08:14,381 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15209 states, 10601 states have (on average 1.380152815772097) internal successors, (14631), 11223 states have internal predecessors, (14631), 3519 states have call successors, (3519), 834 states have call predecessors, (3519), 1088 states have return successors, (4512), 3485 states have call predecessors, (4512), 3517 states have call successors, (4512) [2021-11-20 06:08:14,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15209 states to 15209 states and 22662 transitions. [2021-11-20 06:08:14,431 INFO L78 Accepts]: Start accepts. Automaton has 15209 states and 22662 transitions. Word has length 282 [2021-11-20 06:08:14,431 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:08:14,431 INFO L470 AbstractCegarLoop]: Abstraction has 15209 states and 22662 transitions. [2021-11-20 06:08:14,432 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 13 states have (on average 12.153846153846153) internal successors, (158), 5 states have internal predecessors, (158), 2 states have call successors, (35), 10 states have call predecessors, (35), 1 states have return successors, (34), 2 states have call predecessors, (34), 2 states have call successors, (34) [2021-11-20 06:08:14,432 INFO L276 IsEmpty]: Start isEmpty. Operand 15209 states and 22662 transitions. [2021-11-20 06:08:14,446 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 301 [2021-11-20 06:08:14,446 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:08:14,446 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:08:14,446 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable12 [2021-11-20 06:08:14,446 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:08:14,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:08:14,447 INFO L85 PathProgramCache]: Analyzing trace with hash 1203076046, now seen corresponding path program 1 times [2021-11-20 06:08:14,447 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:08:14,447 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1962508026] [2021-11-20 06:08:14,447 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:08:14,447 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:08:14,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,625 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:08:14,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,638 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,639 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,645 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:14,646 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,654 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:08:14,656 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,662 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,667 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:14,668 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,672 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:08:14,674 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,679 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,680 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,685 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:14,685 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,690 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:08:14,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,697 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,698 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:14,703 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,717 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:08:14,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,724 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,725 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:08:14,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,743 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,753 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-20 06:08:14,757 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,763 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:14,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-11-20 06:08:14,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,785 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,785 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,789 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:14,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,803 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-11-20 06:08:14,806 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,811 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-20 06:08:14,813 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,818 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-11-20 06:08:14,821 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,825 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-20 06:08:14,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,833 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-20 06:08:14,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:14,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,854 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-20 06:08:14,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,862 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-11-20 06:08:14,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,911 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2021-11-20 06:08:14,914 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,919 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-11-20 06:08:14,921 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,925 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2021-11-20 06:08:14,928 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,933 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-11-20 06:08:14,935 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,940 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 247 [2021-11-20 06:08:14,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,948 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-11-20 06:08:14,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,955 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2021-11-20 06:08:14,958 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,963 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-11-20 06:08:14,965 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,970 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2021-11-20 06:08:14,973 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,978 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-11-20 06:08:14,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,984 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 286 [2021-11-20 06:08:14,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:14,993 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 0 proven. 15 refuted. 0 times theorem prover too weak. 359 trivial. 0 not checked. [2021-11-20 06:08:14,994 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:08:14,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1962508026] [2021-11-20 06:08:14,994 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1962508026] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:08:14,994 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [605633618] [2021-11-20 06:08:14,994 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:08:14,995 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:08:14,995 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:08:14,998 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:08:15,025 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Waiting until timeout for monitored process [2021-11-20 06:08:15,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:15,746 INFO L263 TraceCheckSpWp]: Trace formula consists of 2639 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 06:08:15,767 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:08:16,362 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 15 proven. 0 refuted. 0 times theorem prover too weak. 359 trivial. 0 not checked. [2021-11-20 06:08:16,362 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 06:08:16,363 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [605633618] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:08:16,363 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:08:16,363 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [10] total 13 [2021-11-20 06:08:16,364 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [351123305] [2021-11-20 06:08:16,364 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:08:16,364 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:08:16,365 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:08:16,365 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:08:16,365 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=127, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:08:16,365 INFO L87 Difference]: Start difference. First operand 15209 states and 22662 transitions. Second operand has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-20 06:08:18,004 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:08:18,004 INFO L93 Difference]: Finished difference Result 27743 states and 41384 transitions. [2021-11-20 06:08:18,005 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-11-20 06:08:18,005 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) Word has length 300 [2021-11-20 06:08:18,006 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:08:18,070 INFO L225 Difference]: With dead ends: 27743 [2021-11-20 06:08:18,070 INFO L226 Difference]: Without dead ends: 21498 [2021-11-20 06:08:18,091 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 390 GetRequests, 376 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 27 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=44, Invalid=196, Unknown=0, NotChecked=0, Total=240 [2021-11-20 06:08:18,092 INFO L933 BasicCegarLoop]: 4272 mSDtfsCounter, 2817 mSDsluCounter, 9977 mSDsCounter, 0 mSdLazyCounter, 153 mSolverCounterSat, 242 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2839 SdHoareTripleChecker+Valid, 14249 SdHoareTripleChecker+Invalid, 395 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 242 IncrementalHoareTripleChecker+Valid, 153 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:08:18,092 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2839 Valid, 14249 Invalid, 395 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [242 Valid, 153 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-20 06:08:18,120 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21498 states. [2021-11-20 06:08:18,993 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21498 to 15233. [2021-11-20 06:08:19,004 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15233 states, 10615 states have (on average 1.3796514366462553) internal successors, (14645), 11239 states have internal predecessors, (14645), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1088 states have return successors, (4524), 3495 states have call predecessors, (4524), 3527 states have call successors, (4524) [2021-11-20 06:08:19,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15233 states to 15233 states and 22698 transitions. [2021-11-20 06:08:19,054 INFO L78 Accepts]: Start accepts. Automaton has 15233 states and 22698 transitions. Word has length 300 [2021-11-20 06:08:19,054 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:08:19,054 INFO L470 AbstractCegarLoop]: Abstraction has 15233 states and 22698 transitions. [2021-11-20 06:08:19,055 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 23.6) internal successors, (118), 5 states have internal predecessors, (118), 2 states have call successors, (31), 2 states have call predecessors, (31), 2 states have return successors, (30), 2 states have call predecessors, (30), 2 states have call successors, (30) [2021-11-20 06:08:19,055 INFO L276 IsEmpty]: Start isEmpty. Operand 15233 states and 22698 transitions. [2021-11-20 06:08:19,069 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 301 [2021-11-20 06:08:19,069 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:08:19,069 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:08:19,097 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (2)] Forceful destruction successful, exit code 0 [2021-11-20 06:08:19,271 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable13 [2021-11-20 06:08:19,271 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:08:19,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:08:19,272 INFO L85 PathProgramCache]: Analyzing trace with hash -703327220, now seen corresponding path program 1 times [2021-11-20 06:08:19,272 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:08:19,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1492401905] [2021-11-20 06:08:19,272 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:08:19,272 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:08:19,373 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,575 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:08:19,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,588 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,589 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,594 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:19,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,599 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:08:19,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:19,613 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,617 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:08:19,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,624 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,625 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,629 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:19,630 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,634 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:08:19,636 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,641 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,646 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:19,647 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,661 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:08:19,663 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,668 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,669 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 78 [2021-11-20 06:08:19,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,680 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,681 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,686 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 109 [2021-11-20 06:08:19,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,693 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,699 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:19,699 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,703 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 130 [2021-11-20 06:08:19,706 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,711 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,711 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,715 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:19,716 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,730 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 155 [2021-11-20 06:08:19,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,764 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 166 [2021-11-20 06:08:19,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,771 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 171 [2021-11-20 06:08:19,773 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,777 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-20 06:08:19,779 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,783 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-20 06:08:19,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:19,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,806 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 192 [2021-11-20 06:08:19,808 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,812 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 217 [2021-11-20 06:08:19,814 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,853 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 221 [2021-11-20 06:08:19,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,861 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 230 [2021-11-20 06:08:19,862 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,866 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 234 [2021-11-20 06:08:19,869 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,874 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 243 [2021-11-20 06:08:19,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,880 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 247 [2021-11-20 06:08:19,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,887 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 256 [2021-11-20 06:08:19,889 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 260 [2021-11-20 06:08:19,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,901 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 269 [2021-11-20 06:08:19,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,908 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 273 [2021-11-20 06:08:19,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,915 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 282 [2021-11-20 06:08:19,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 286 [2021-11-20 06:08:19,924 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:19,930 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 357 trivial. 0 not checked. [2021-11-20 06:08:19,930 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:08:19,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1492401905] [2021-11-20 06:08:19,930 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1492401905] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:08:19,931 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [336811950] [2021-11-20 06:08:19,931 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:08:19,931 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:08:19,931 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:08:19,932 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:08:19,956 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Waiting until timeout for monitored process [2021-11-20 06:08:20,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:20,780 INFO L263 TraceCheckSpWp]: Trace formula consists of 2634 conjuncts, 11 conjunts are in the unsatisfiable core [2021-11-20 06:08:20,789 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:08:21,452 INFO L134 CoverageAnalysis]: Checked inductivity of 374 backedges. 121 proven. 0 refuted. 0 times theorem prover too weak. 253 trivial. 0 not checked. [2021-11-20 06:08:21,452 INFO L324 TraceCheckSpWp]: Omiting computation of backward sequence because forward sequence was already perfect [2021-11-20 06:08:21,452 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [336811950] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:08:21,453 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:08:21,453 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [11] total 15 [2021-11-20 06:08:21,453 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [542980958] [2021-11-20 06:08:21,453 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:08:21,454 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:08:21,454 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:08:21,454 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:08:21,454 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:08:21,455 INFO L87 Difference]: Start difference. First operand 15233 states and 22698 transitions. Second operand has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-11-20 06:08:22,550 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:08:22,550 INFO L93 Difference]: Finished difference Result 30477 states and 45444 transitions. [2021-11-20 06:08:22,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:08:22,551 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) Word has length 300 [2021-11-20 06:08:22,551 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:08:22,621 INFO L225 Difference]: With dead ends: 30477 [2021-11-20 06:08:22,621 INFO L226 Difference]: Without dead ends: 15263 [2021-11-20 06:08:22,667 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 388 GetRequests, 373 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 31 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=41, Invalid=231, Unknown=0, NotChecked=0, Total=272 [2021-11-20 06:08:22,668 INFO L933 BasicCegarLoop]: 2244 mSDtfsCounter, 6 mSDsluCounter, 8962 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11206 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:08:22,668 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11206 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:08:22,682 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15263 states. [2021-11-20 06:08:23,655 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15263 to 15236. [2021-11-20 06:08:23,664 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15236 states, 10617 states have (on average 1.3796741075633419) internal successors, (14648), 11242 states have internal predecessors, (14648), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1089 states have return successors, (4528), 3495 states have call predecessors, (4528), 3527 states have call successors, (4528) [2021-11-20 06:08:23,717 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15236 states to 15236 states and 22705 transitions. [2021-11-20 06:08:23,722 INFO L78 Accepts]: Start accepts. Automaton has 15236 states and 22705 transitions. Word has length 300 [2021-11-20 06:08:23,723 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:08:23,723 INFO L470 AbstractCegarLoop]: Abstraction has 15236 states and 22705 transitions. [2021-11-20 06:08:23,723 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 24.6) internal successors, (123), 6 states have internal predecessors, (123), 3 states have call successors, (34), 2 states have call predecessors, (34), 4 states have return successors, (33), 3 states have call predecessors, (33), 3 states have call successors, (33) [2021-11-20 06:08:23,723 INFO L276 IsEmpty]: Start isEmpty. Operand 15236 states and 22705 transitions. [2021-11-20 06:08:23,741 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 303 [2021-11-20 06:08:23,741 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:08:23,742 INFO L514 BasicCegarLoop]: trace histogram [6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:08:23,771 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (3)] Forceful destruction successful, exit code 0 [2021-11-20 06:08:23,942 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable14 [2021-11-20 06:08:23,943 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:08:23,943 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:08:23,943 INFO L85 PathProgramCache]: Analyzing trace with hash -1296151014, now seen corresponding path program 1 times [2021-11-20 06:08:23,943 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:08:23,943 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [596741924] [2021-11-20 06:08:23,943 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:08:23,943 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:08:24,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,112 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:08:24,114 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,125 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,126 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,130 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:24,131 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,134 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:08:24,136 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,142 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,146 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:24,146 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,150 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:08:24,152 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,157 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,158 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,162 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:24,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,166 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:08:24,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,174 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,178 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:24,179 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,193 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:08:24,195 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,200 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,201 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,208 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 79 [2021-11-20 06:08:24,210 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,215 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,220 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 111 [2021-11-20 06:08:24,222 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,227 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,232 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:24,233 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,236 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 132 [2021-11-20 06:08:24,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,243 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:24,248 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,262 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 157 [2021-11-20 06:08:24,265 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,293 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 168 [2021-11-20 06:08:24,295 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,300 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 173 [2021-11-20 06:08:24,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,306 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-20 06:08:24,308 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,312 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-11-20 06:08:24,314 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,318 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:24,319 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,331 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 194 [2021-11-20 06:08:24,333 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 219 [2021-11-20 06:08:24,339 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,378 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 223 [2021-11-20 06:08:24,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,385 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 232 [2021-11-20 06:08:24,387 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,391 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 236 [2021-11-20 06:08:24,393 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,398 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 245 [2021-11-20 06:08:24,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,404 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 249 [2021-11-20 06:08:24,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 258 [2021-11-20 06:08:24,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,416 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 262 [2021-11-20 06:08:24,419 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,423 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 271 [2021-11-20 06:08:24,425 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,429 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 275 [2021-11-20 06:08:24,432 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,436 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 284 [2021-11-20 06:08:24,438 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,442 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 288 [2021-11-20 06:08:24,444 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:24,450 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 15 proven. 2 refuted. 0 times theorem prover too weak. 362 trivial. 0 not checked. [2021-11-20 06:08:24,451 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:08:24,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [596741924] [2021-11-20 06:08:24,451 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [596741924] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:08:24,451 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [813222119] [2021-11-20 06:08:24,452 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:08:24,452 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:08:24,452 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:08:24,457 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:08:24,458 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Waiting until timeout for monitored process [2021-11-20 06:08:25,229 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:25,242 INFO L263 TraceCheckSpWp]: Trace formula consists of 2646 conjuncts, 12 conjunts are in the unsatisfiable core [2021-11-20 06:08:25,248 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:08:25,992 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 122 proven. 1 refuted. 0 times theorem prover too weak. 256 trivial. 0 not checked. [2021-11-20 06:08:25,992 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:08:27,049 INFO L134 CoverageAnalysis]: Checked inductivity of 379 backedges. 10 proven. 1 refuted. 0 times theorem prover too weak. 368 trivial. 0 not checked. [2021-11-20 06:08:27,049 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [813222119] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:08:27,049 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 06:08:27,050 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [11, 7, 7] total 20 [2021-11-20 06:08:27,050 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [608170047] [2021-11-20 06:08:27,050 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 06:08:27,051 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 20 states [2021-11-20 06:08:27,051 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:08:27,052 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 20 interpolants. [2021-11-20 06:08:27,052 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=51, Invalid=329, Unknown=0, NotChecked=0, Total=380 [2021-11-20 06:08:27,052 INFO L87 Difference]: Start difference. First operand 15236 states and 22705 transitions. Second operand has 20 states, 18 states have (on average 11.0) internal successors, (198), 13 states have internal predecessors, (198), 4 states have call successors, (76), 8 states have call predecessors, (76), 6 states have return successors, (60), 5 states have call predecessors, (60), 4 states have call successors, (60) [2021-11-20 06:08:51,571 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:08:51,572 INFO L93 Difference]: Finished difference Result 32569 states and 49182 transitions. [2021-11-20 06:08:51,578 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-20 06:08:51,579 INFO L78 Accepts]: Start accepts. Automaton has has 20 states, 18 states have (on average 11.0) internal successors, (198), 13 states have internal predecessors, (198), 4 states have call successors, (76), 8 states have call predecessors, (76), 6 states have return successors, (60), 5 states have call predecessors, (60), 4 states have call successors, (60) Word has length 302 [2021-11-20 06:08:51,579 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:08:51,667 INFO L225 Difference]: With dead ends: 32569 [2021-11-20 06:08:51,667 INFO L226 Difference]: Without dead ends: 17352 [2021-11-20 06:08:51,704 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 705 GetRequests, 674 SyntacticMatches, 0 SemanticMatches, 31 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 139 ImplicationChecksByTransitivity, 0.8s TimeCoverageRelationStatistics Valid=169, Invalid=887, Unknown=0, NotChecked=0, Total=1056 [2021-11-20 06:08:51,705 INFO L933 BasicCegarLoop]: 2033 mSDtfsCounter, 3539 mSDsluCounter, 17303 mSDsCounter, 0 mSdLazyCounter, 12992 mSolverCounterSat, 3342 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 19.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3689 SdHoareTripleChecker+Valid, 19336 SdHoareTripleChecker+Invalid, 16334 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3342 IncrementalHoareTripleChecker+Valid, 12992 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 22.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:08:51,705 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3689 Valid, 19336 Invalid, 16334 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3342 Valid, 12992 Invalid, 0 Unknown, 0 Unchecked, 22.5s Time] [2021-11-20 06:08:51,720 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17352 states. [2021-11-20 06:08:52,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17352 to 15249. [2021-11-20 06:08:52,785 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15249 states, 10628 states have (on average 1.3793752352277004) internal successors, (14660), 11251 states have internal predecessors, (14660), 3529 states have call successors, (3529), 834 states have call predecessors, (3529), 1091 states have return successors, (4537), 3499 states have call predecessors, (4537), 3527 states have call successors, (4537) [2021-11-20 06:08:52,830 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15249 states to 15249 states and 22726 transitions. [2021-11-20 06:08:52,833 INFO L78 Accepts]: Start accepts. Automaton has 15249 states and 22726 transitions. Word has length 302 [2021-11-20 06:08:52,833 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:08:52,833 INFO L470 AbstractCegarLoop]: Abstraction has 15249 states and 22726 transitions. [2021-11-20 06:08:52,833 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 20 states, 18 states have (on average 11.0) internal successors, (198), 13 states have internal predecessors, (198), 4 states have call successors, (76), 8 states have call predecessors, (76), 6 states have return successors, (60), 5 states have call predecessors, (60), 4 states have call successors, (60) [2021-11-20 06:08:52,833 INFO L276 IsEmpty]: Start isEmpty. Operand 15249 states and 22726 transitions. [2021-11-20 06:08:52,856 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 311 [2021-11-20 06:08:52,857 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:08:52,857 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:08:52,882 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (4)] Forceful destruction successful, exit code 0 [2021-11-20 06:08:53,059 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable15 [2021-11-20 06:08:53,059 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:08:53,060 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:08:53,060 INFO L85 PathProgramCache]: Analyzing trace with hash -157963250, now seen corresponding path program 1 times [2021-11-20 06:08:53,060 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:08:53,060 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1606672532] [2021-11-20 06:08:53,061 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:08:53,061 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:08:53,174 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,297 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:08:53,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,315 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,318 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,323 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:53,324 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,329 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:08:53,331 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,337 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,338 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,343 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:53,344 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,349 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:08:53,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,356 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,357 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,361 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:53,362 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,367 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:08:53,369 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,374 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,375 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,379 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:53,380 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,401 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:08:53,405 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,411 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,412 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,418 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-20 06:08:53,420 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,427 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,434 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-11-20 06:08:53,436 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,448 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,457 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:53,457 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,462 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-11-20 06:08:53,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,471 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,472 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,477 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:08:53,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,495 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-11-20 06:08:53,497 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,504 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:08:53,504 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,509 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-20 06:08:53,511 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,516 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-20 06:08:53,518 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,524 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 186 [2021-11-20 06:08:53,526 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,531 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-11-20 06:08:53,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,612 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:08:53,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,673 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-11-20 06:08:53,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,775 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-11-20 06:08:53,778 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,835 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-11-20 06:08:53,837 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,842 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-11-20 06:08:53,843 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,849 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-11-20 06:08:53,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,858 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-11-20 06:08:53,860 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,864 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 257 [2021-11-20 06:08:53,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-11-20 06:08:53,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,877 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2021-11-20 06:08:53,880 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,884 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-11-20 06:08:53,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,893 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-11-20 06:08:53,895 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,900 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-11-20 06:08:53,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,907 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 296 [2021-11-20 06:08:53,911 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:08:53,917 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 17 proven. 0 refuted. 0 times theorem prover too weak. 395 trivial. 0 not checked. [2021-11-20 06:08:53,918 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:08:53,918 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1606672532] [2021-11-20 06:08:53,918 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1606672532] provided 1 perfect and 0 imperfect interpolant sequences [2021-11-20 06:08:53,918 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:08:53,919 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2021-11-20 06:08:53,919 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [600562756] [2021-11-20 06:08:53,919 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:08:53,920 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-20 06:08:53,920 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:08:53,921 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-20 06:08:53,921 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=33, Invalid=177, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:08:53,921 INFO L87 Difference]: Start difference. First operand 15249 states and 22726 transitions. Second operand has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-11-20 06:09:00,269 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.16s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:09:01,898 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.05s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:09:03,130 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.23s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:09:19,892 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:19,892 INFO L93 Difference]: Finished difference Result 22169 states and 33954 transitions. [2021-11-20 06:09:19,893 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-11-20 06:09:19,893 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) Word has length 310 [2021-11-20 06:09:19,893 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:19,989 INFO L225 Difference]: With dead ends: 22169 [2021-11-20 06:09:19,990 INFO L226 Difference]: Without dead ends: 18622 [2021-11-20 06:09:20,015 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 104 GetRequests, 82 SyntacticMatches, 0 SemanticMatches, 22 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 61 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=124, Invalid=428, Unknown=0, NotChecked=0, Total=552 [2021-11-20 06:09:20,016 INFO L933 BasicCegarLoop]: 2670 mSDtfsCounter, 3406 mSDsluCounter, 18900 mSDsCounter, 0 mSdLazyCounter, 11328 mSolverCounterSat, 2784 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 22.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3709 SdHoareTripleChecker+Valid, 21570 SdHoareTripleChecker+Invalid, 14112 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2784 IncrementalHoareTripleChecker+Valid, 11328 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 24.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:20,016 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3709 Valid, 21570 Invalid, 14112 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2784 Valid, 11328 Invalid, 0 Unknown, 0 Unchecked, 24.3s Time] [2021-11-20 06:09:20,036 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18622 states. [2021-11-20 06:09:21,329 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18622 to 15259. [2021-11-20 06:09:21,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15259 states, 10634 states have (on average 1.3791611811171713) internal successors, (14666), 11257 states have internal predecessors, (14666), 3531 states have call successors, (3531), 834 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-11-20 06:09:21,386 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15259 states to 15259 states and 22742 transitions. [2021-11-20 06:09:21,388 INFO L78 Accepts]: Start accepts. Automaton has 15259 states and 22742 transitions. Word has length 310 [2021-11-20 06:09:21,388 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:21,388 INFO L470 AbstractCegarLoop]: Abstraction has 15259 states and 22742 transitions. [2021-11-20 06:09:21,388 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 14 states have (on average 8.714285714285714) internal successors, (122), 7 states have internal predecessors, (122), 3 states have call successors, (32), 8 states have call predecessors, (32), 4 states have return successors, (31), 4 states have call predecessors, (31), 3 states have call successors, (31) [2021-11-20 06:09:21,388 INFO L276 IsEmpty]: Start isEmpty. Operand 15259 states and 22742 transitions. [2021-11-20 06:09:21,404 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 312 [2021-11-20 06:09:21,404 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:21,404 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 4, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:21,404 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable16 [2021-11-20 06:09:21,404 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:21,405 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:21,405 INFO L85 PathProgramCache]: Analyzing trace with hash 1550664252, now seen corresponding path program 1 times [2021-11-20 06:09:21,405 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:21,405 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [967032391] [2021-11-20 06:09:21,405 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:21,405 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:21,485 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,545 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:21,547 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,555 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,560 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:21,561 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,565 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:09:21,566 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,571 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,572 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,576 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:21,577 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,580 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:09:21,582 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,587 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,588 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,591 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:21,592 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,596 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:09:21,598 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,603 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,604 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,607 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:21,608 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,620 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:09:21,627 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,653 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,791 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 80 [2021-11-20 06:09:21,795 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,801 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,803 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,809 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 113 [2021-11-20 06:09:21,812 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,817 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,822 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:21,823 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,827 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 134 [2021-11-20 06:09:21,830 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,836 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,836 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,840 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:21,841 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,863 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 159 [2021-11-20 06:09:21,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,871 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:21,872 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,876 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 176 [2021-11-20 06:09:21,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,882 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 181 [2021-11-20 06:09:21,884 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,889 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 186 [2021-11-20 06:09:21,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,895 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 191 [2021-11-20 06:09:21,898 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,902 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:21,903 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,921 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 202 [2021-11-20 06:09:21,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,928 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 227 [2021-11-20 06:09:21,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,979 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 231 [2021-11-20 06:09:21,982 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,987 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 240 [2021-11-20 06:09:21,989 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:21,993 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 244 [2021-11-20 06:09:21,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,001 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 253 [2021-11-20 06:09:22,003 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,008 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 257 [2021-11-20 06:09:22,011 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,016 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 266 [2021-11-20 06:09:22,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,023 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 270 [2021-11-20 06:09:22,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,031 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 279 [2021-11-20 06:09:22,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,038 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 283 [2021-11-20 06:09:22,041 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,046 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 292 [2021-11-20 06:09:22,049 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,053 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 296 [2021-11-20 06:09:22,056 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:22,067 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 394 trivial. 0 not checked. [2021-11-20 06:09:22,067 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:22,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [967032391] [2021-11-20 06:09:22,069 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [967032391] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:09:22,069 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [689797741] [2021-11-20 06:09:22,069 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:22,070 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:09:22,070 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:09:22,071 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:09:22,077 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Waiting until timeout for monitored process [2021-11-20 06:09:23,424 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:23,437 INFO L263 TraceCheckSpWp]: Trace formula consists of 2681 conjuncts, 13 conjunts are in the unsatisfiable core [2021-11-20 06:09:23,449 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:09:24,314 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 145 proven. 3 refuted. 0 times theorem prover too weak. 264 trivial. 0 not checked. [2021-11-20 06:09:24,314 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:09:25,408 INFO L134 CoverageAnalysis]: Checked inductivity of 412 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 394 trivial. 0 not checked. [2021-11-20 06:09:25,409 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [689797741] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:09:25,409 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 06:09:25,409 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [14, 8, 8] total 22 [2021-11-20 06:09:25,410 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [451850269] [2021-11-20 06:09:25,410 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 06:09:25,411 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 22 states [2021-11-20 06:09:25,411 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:09:25,411 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 22 interpolants. [2021-11-20 06:09:25,412 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=62, Invalid=400, Unknown=0, NotChecked=0, Total=462 [2021-11-20 06:09:25,412 INFO L87 Difference]: Start difference. First operand 15259 states and 22742 transitions. Second operand has 22 states, 20 states have (on average 9.0) internal successors, (180), 16 states have internal predecessors, (180), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-20 06:09:33,803 WARN L515 Checker$ProtectedHtc]: IncrementalHoareTripleChecker took 1.15s for a HTC check with result INVALID. Formula has sorts [Array, Bool, Int], hasArrays=true, hasNonlinArith=false, quantifiers [] [2021-11-20 06:09:56,993 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:09:56,993 INFO L93 Difference]: Finished difference Result 32614 states and 49311 transitions. [2021-11-20 06:09:56,994 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 19 states. [2021-11-20 06:09:56,994 INFO L78 Accepts]: Start accepts. Automaton has has 22 states, 20 states have (on average 9.0) internal successors, (180), 16 states have internal predecessors, (180), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 311 [2021-11-20 06:09:56,994 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:09:57,075 INFO L225 Difference]: With dead ends: 32614 [2021-11-20 06:09:57,076 INFO L226 Difference]: Without dead ends: 17374 [2021-11-20 06:09:57,125 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 726 GetRequests, 691 SyntacticMatches, 2 SemanticMatches, 33 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 204 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=202, Invalid=988, Unknown=0, NotChecked=0, Total=1190 [2021-11-20 06:09:57,125 INFO L933 BasicCegarLoop]: 2023 mSDtfsCounter, 3550 mSDsluCounter, 16451 mSDsCounter, 0 mSdLazyCounter, 13262 mSolverCounterSat, 3364 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 26.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3698 SdHoareTripleChecker+Valid, 18474 SdHoareTripleChecker+Invalid, 16626 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 3364 IncrementalHoareTripleChecker+Valid, 13262 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 29.6s IncrementalHoareTripleChecker+Time [2021-11-20 06:09:57,126 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3698 Valid, 18474 Invalid, 16626 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [3364 Valid, 13262 Invalid, 0 Unknown, 0 Unchecked, 29.6s Time] [2021-11-20 06:09:57,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17374 states. [2021-11-20 06:09:58,285 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17374 to 15260. [2021-11-20 06:09:58,295 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15260 states, 10635 states have (on average 1.3792195580629996) internal successors, (14668), 11258 states have internal predecessors, (14668), 3531 states have call successors, (3531), 834 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-11-20 06:09:58,344 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15260 states to 15260 states and 22744 transitions. [2021-11-20 06:09:58,346 INFO L78 Accepts]: Start accepts. Automaton has 15260 states and 22744 transitions. Word has length 311 [2021-11-20 06:09:58,346 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:09:58,346 INFO L470 AbstractCegarLoop]: Abstraction has 15260 states and 22744 transitions. [2021-11-20 06:09:58,347 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 22 states, 20 states have (on average 9.0) internal successors, (180), 16 states have internal predecessors, (180), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-20 06:09:58,347 INFO L276 IsEmpty]: Start isEmpty. Operand 15260 states and 22744 transitions. [2021-11-20 06:09:58,367 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 314 [2021-11-20 06:09:58,367 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:09:58,368 INFO L514 BasicCegarLoop]: trace histogram [7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:09:58,396 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (5)] Ended with exit code 0 [2021-11-20 06:09:58,568 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true,SelfDestructingSolverStorable17 [2021-11-20 06:09:58,568 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:09:58,569 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:09:58,569 INFO L85 PathProgramCache]: Analyzing trace with hash -804403218, now seen corresponding path program 2 times [2021-11-20 06:09:58,569 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:09:58,569 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [291385687] [2021-11-20 06:09:58,569 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:09:58,569 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:09:58,648 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,708 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:58,710 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,718 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:58,719 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,722 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:58,723 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,727 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 18 [2021-11-20 06:09:58,729 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,734 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:58,734 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,738 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:58,739 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,742 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 34 [2021-11-20 06:09:58,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,749 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:58,750 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,754 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:58,755 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,759 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 50 [2021-11-20 06:09:58,761 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,766 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:58,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,770 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:58,771 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,782 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 67 [2021-11-20 06:09:58,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:58,831 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:58,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,014 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 81 [2021-11-20 06:09:59,018 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,025 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:59,026 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,032 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 115 [2021-11-20 06:09:59,035 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,040 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:59,040 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,044 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:59,045 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,049 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 136 [2021-11-20 06:09:59,052 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,057 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:59,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,061 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 6 [2021-11-20 06:09:59,062 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,085 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 161 [2021-11-20 06:09:59,087 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,092 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 2 [2021-11-20 06:09:59,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,097 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 178 [2021-11-20 06:09:59,099 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,103 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 183 [2021-11-20 06:09:59,105 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,110 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 188 [2021-11-20 06:09:59,112 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,116 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 193 [2021-11-20 06:09:59,118 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,122 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 1 [2021-11-20 06:09:59,123 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,141 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 204 [2021-11-20 06:09:59,143 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,147 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 229 [2021-11-20 06:09:59,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,197 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 233 [2021-11-20 06:09:59,199 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,204 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 242 [2021-11-20 06:09:59,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,210 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 246 [2021-11-20 06:09:59,212 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,217 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 255 [2021-11-20 06:09:59,219 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,222 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 259 [2021-11-20 06:09:59,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,229 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 268 [2021-11-20 06:09:59,231 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,235 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 272 [2021-11-20 06:09:59,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,242 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 281 [2021-11-20 06:09:59,244 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,248 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 285 [2021-11-20 06:09:59,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,259 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 294 [2021-11-20 06:09:59,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,265 INFO L376 atingTraceCheckCraig]: Compute interpolants for subsequence at non-pending call position 298 [2021-11-20 06:09:59,268 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:09:59,273 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-11-20 06:09:59,274 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-11-20 06:09:59,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [291385687] [2021-11-20 06:09:59,274 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [291385687] provided 0 perfect and 1 imperfect interpolant sequences [2021-11-20 06:09:59,274 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleZ3 [558537264] [2021-11-20 06:09:59,274 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 06:09:59,275 INFO L168 SolverBuilder]: Constructing external solver with command: z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:09:59,275 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:09:59,277 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (exit command is (exit), workingDir is null) [2021-11-20 06:09:59,296 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Waiting until timeout for monitored process [2021-11-20 06:10:00,437 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 2 check-sat command(s) [2021-11-20 06:10:00,437 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 06:10:00,449 INFO L263 TraceCheckSpWp]: Trace formula consists of 2693 conjuncts, 15 conjunts are in the unsatisfiable core [2021-11-20 06:10:00,455 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:10:01,198 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 152 proven. 6 refuted. 0 times theorem prover too weak. 267 trivial. 0 not checked. [2021-11-20 06:10:01,199 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:10:02,366 INFO L134 CoverageAnalysis]: Checked inductivity of 425 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 397 trivial. 0 not checked. [2021-11-20 06:10:02,366 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleZ3 [558537264] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:10:02,366 INFO L186 FreeRefinementEngine]: Found 0 perfect and 3 imperfect interpolant sequences. [2021-11-20 06:10:02,367 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [15, 9, 9] total 24 [2021-11-20 06:10:02,367 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1968385704] [2021-11-20 06:10:02,367 INFO L85 oduleStraightlineAll]: Using 3 imperfect interpolants to construct interpolant automaton [2021-11-20 06:10:02,368 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 24 states [2021-11-20 06:10:02,368 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-11-20 06:10:02,369 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 24 interpolants. [2021-11-20 06:10:02,369 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=71, Invalid=481, Unknown=0, NotChecked=0, Total=552 [2021-11-20 06:10:02,370 INFO L87 Difference]: Start difference. First operand 15260 states and 22744 transitions. Second operand has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-20 06:10:40,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:10:40,987 INFO L93 Difference]: Finished difference Result 32645 states and 49423 transitions. [2021-11-20 06:10:40,987 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2021-11-20 06:10:40,987 INFO L78 Accepts]: Start accepts. Automaton has has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) Word has length 313 [2021-11-20 06:10:40,988 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:10:41,046 INFO L225 Difference]: With dead ends: 32645 [2021-11-20 06:10:41,046 INFO L226 Difference]: Without dead ends: 17404 [2021-11-20 06:10:41,080 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 733 GetRequests, 693 SyntacticMatches, 3 SemanticMatches, 37 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 254 ImplicationChecksByTransitivity, 1.3s TimeCoverageRelationStatistics Valid=237, Invalid=1245, Unknown=0, NotChecked=0, Total=1482 [2021-11-20 06:10:41,081 INFO L933 BasicCegarLoop]: 2041 mSDtfsCounter, 3118 mSDsluCounter, 19511 mSDsCounter, 0 mSdLazyCounter, 15367 mSolverCounterSat, 2877 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 31.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3271 SdHoareTripleChecker+Valid, 21552 SdHoareTripleChecker+Invalid, 18244 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 2877 IncrementalHoareTripleChecker+Valid, 15367 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 36.6s IncrementalHoareTripleChecker+Time [2021-11-20 06:10:41,082 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3271 Valid, 21552 Invalid, 18244 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [2877 Valid, 15367 Invalid, 0 Unknown, 0 Unchecked, 36.6s Time] [2021-11-20 06:10:41,094 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17404 states. [2021-11-20 06:10:42,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17404 to 15261. [2021-11-20 06:10:42,128 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15261 states, 10636 states have (on average 1.3792779240315909) internal successors, (14670), 11259 states have internal predecessors, (14670), 3531 states have call successors, (3531), 834 states have call predecessors, (3531), 1093 states have return successors, (4545), 3503 states have call predecessors, (4545), 3529 states have call successors, (4545) [2021-11-20 06:10:42,175 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15261 states to 15261 states and 22746 transitions. [2021-11-20 06:10:42,177 INFO L78 Accepts]: Start accepts. Automaton has 15261 states and 22746 transitions. Word has length 313 [2021-11-20 06:10:42,177 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:10:42,178 INFO L470 AbstractCegarLoop]: Abstraction has 15261 states and 22746 transitions. [2021-11-20 06:10:42,178 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 24 states, 22 states have (on average 8.272727272727273) internal successors, (182), 18 states have internal predecessors, (182), 4 states have call successors, (81), 8 states have call predecessors, (81), 6 states have return successors, (61), 4 states have call predecessors, (61), 4 states have call successors, (61) [2021-11-20 06:10:42,178 INFO L276 IsEmpty]: Start isEmpty. Operand 15261 states and 22746 transitions. [2021-11-20 06:10:42,192 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 316 [2021-11-20 06:10:42,192 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:10:42,193 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:10:42,218 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true (6)] Forceful destruction successful, exit code 0 [2021-11-20 06:10:42,393 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable18,6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 -smt2 -in SMTLIB2_COMPLIANT=true [2021-11-20 06:10:42,393 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:10:42,394 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:10:42,394 INFO L85 PathProgramCache]: Analyzing trace with hash -1100694020, now seen corresponding path program 3 times [2021-11-20 06:10:42,394 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-11-20 06:10:42,394 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1431110808] [2021-11-20 06:10:42,394 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:10:42,394 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-11-20 06:10:43,036 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:10:43,036 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-20 06:10:43,557 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:10:44,262 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-11-20 06:10:44,262 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-20 06:10:44,263 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 06:10:44,265 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: SelfDestructingSolverStorable19 [2021-11-20 06:10:44,268 INFO L732 BasicCegarLoop]: Path program histogram: [3, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:10:44,272 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 06:10:44,369 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-20 06:10:44,374 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-20 06:10:44,930 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 06:10:44 BoogieIcfgContainer [2021-11-20 06:10:44,930 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 06:10:44,931 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 06:10:44,931 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 06:10:44,931 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 06:10:44,932 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:04:20" (3/4) ... [2021-11-20 06:10:44,934 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-20 06:10:44,935 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 06:10:44,935 INFO L158 Benchmark]: Toolchain (without parser) took 396058.33ms. Allocated memory was 104.9MB in the beginning and 2.6GB in the end (delta: 2.5GB). Free memory was 78.5MB in the beginning and 430.2MB in the end (delta: -351.7MB). Peak memory consumption was 2.1GB. Max. memory is 16.1GB. [2021-11-20 06:10:44,936 INFO L158 Benchmark]: CDTParser took 0.33ms. Allocated memory is still 86.0MB. Free memory is still 65.9MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:10:44,936 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3146.92ms. Allocated memory was 104.9MB in the beginning and 151.0MB in the end (delta: 46.1MB). Free memory was 78.2MB in the beginning and 82.4MB in the end (delta: -4.2MB). Peak memory consumption was 69.8MB. Max. memory is 16.1GB. [2021-11-20 06:10:44,936 INFO L158 Benchmark]: Boogie Procedure Inliner took 398.10ms. Allocated memory is still 151.0MB. Free memory was 82.4MB in the beginning and 85.2MB in the end (delta: -2.8MB). Peak memory consumption was 37.8MB. Max. memory is 16.1GB. [2021-11-20 06:10:44,937 INFO L158 Benchmark]: Boogie Preprocessor took 397.94ms. Allocated memory is still 151.0MB. Free memory was 85.2MB in the beginning and 55.1MB in the end (delta: 30.1MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. [2021-11-20 06:10:44,937 INFO L158 Benchmark]: RCFGBuilder took 7736.46ms. Allocated memory was 151.0MB in the beginning and 442.5MB in the end (delta: 291.5MB). Free memory was 55.1MB in the beginning and 315.7MB in the end (delta: -260.5MB). Peak memory consumption was 107.4MB. Max. memory is 16.1GB. [2021-11-20 06:10:44,938 INFO L158 Benchmark]: TraceAbstraction took 384367.04ms. Allocated memory was 442.5MB in the beginning and 2.6GB in the end (delta: 2.1GB). Free memory was 315.7MB in the beginning and 430.2MB in the end (delta: -114.5MB). Peak memory consumption was 2.0GB. Max. memory is 16.1GB. [2021-11-20 06:10:44,938 INFO L158 Benchmark]: Witness Printer took 3.99ms. Allocated memory is still 2.6GB. Free memory is still 430.2MB. There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:10:44,941 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.33ms. Allocated memory is still 86.0MB. Free memory is still 65.9MB. There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3146.92ms. Allocated memory was 104.9MB in the beginning and 151.0MB in the end (delta: 46.1MB). Free memory was 78.2MB in the beginning and 82.4MB in the end (delta: -4.2MB). Peak memory consumption was 69.8MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 398.10ms. Allocated memory is still 151.0MB. Free memory was 82.4MB in the beginning and 85.2MB in the end (delta: -2.8MB). Peak memory consumption was 37.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 397.94ms. Allocated memory is still 151.0MB. Free memory was 85.2MB in the beginning and 55.1MB in the end (delta: 30.1MB). Peak memory consumption was 29.4MB. Max. memory is 16.1GB. * RCFGBuilder took 7736.46ms. Allocated memory was 151.0MB in the beginning and 442.5MB in the end (delta: 291.5MB). Free memory was 55.1MB in the beginning and 315.7MB in the end (delta: -260.5MB). Peak memory consumption was 107.4MB. Max. memory is 16.1GB. * TraceAbstraction took 384367.04ms. Allocated memory was 442.5MB in the beginning and 2.6GB in the end (delta: 2.1GB). Free memory was 315.7MB in the beginning and 430.2MB in the end (delta: -114.5MB). Peak memory consumption was 2.0GB. Max. memory is 16.1GB. * Witness Printer took 3.99ms. Allocated memory is still 2.6GB. Free memory is still 430.2MB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8176]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6875. Possible FailurePath: [L4318] int ldv_timer_state_5 = 0; [L4319] int ldv_state_variable_8 ; [L4320] struct timer_list *ldv_timer_list_5 ; [L4321] struct timer_list *ldv_timer_list_4 ; [L4322] struct work_struct *ldv_work_struct_3_1 ; [L4323] struct mmc_host *vub300_mmc_ops_group0 ; [L4324] struct work_struct *ldv_work_struct_1_3 ; [L4325] int ldv_state_variable_0 ; [L4326] int ldv_state_variable_5 ; [L4327] int ldv_work_1_1 ; [L4328] int ldv_work_3_2 ; [L4329] int ldv_work_3_0 ; [L4330] struct work_struct *ldv_work_struct_2_3 ; [L4331] struct work_struct *ldv_work_struct_2_0 ; [L4332] int ldv_timer_state_6 = 0; [L4333] struct work_struct *ldv_work_struct_2_2 ; [L4334] int ldv_timer_state_4 = 0; [L4335] int ref_cnt ; [L4336] int ldv_work_3_3 ; [L4337] int ldv_state_variable_1 ; [L4338] int ldv_state_variable_7 ; [L4339] struct work_struct *ldv_work_struct_3_3 ; [L4340] struct work_struct *ldv_work_struct_1_0 ; [L4341] struct work_struct *ldv_work_struct_1_1 ; [L4342] int ldv_work_1_3 ; [L4343] struct work_struct *ldv_work_struct_2_1 ; [L4344] struct timer_list *ldv_timer_list_6 ; [L4345] struct work_struct *ldv_work_struct_3_2 ; [L4346] int ldv_state_variable_6 ; [L4347] int ldv_work_3_1 ; [L4348] int ldv_state_variable_2 ; [L4349] int ldv_work_2_0 ; [L4350] int usb_counter ; [L4351] struct work_struct *ldv_work_struct_3_0 ; [L4352] int ldv_work_1_2 ; [L4353] int LDV_IN_INTERRUPT = 1; [L4354] struct work_struct *ldv_work_struct_1_2 ; [L4355] int ldv_work_2_2 ; [L4356] int ldv_state_variable_3 ; [L4357] struct usb_interface *vub300_driver_group1 ; [L4358] int ldv_work_1_0 ; [L4359] int ldv_work_2_3 ; [L4360] int ldv_state_variable_4 ; [L4361] int ldv_work_2_1 ; [L4422] static bool limit_speed_to_24_MHz ; [L4423] static bool pad_input_to_usb_pkt ; [L4424] static bool disable_offload_processing ; [L4425] static bool force_1_bit_data_xfers ; [L4426] static bool force_polling_for_irqs ; [L4427] static int firmware_irqpoll_timeout = 1024; [L4428] static int force_max_req_size = 128; [L4429] static int firmware_rom_wait_states = 28; [L4430-L4435] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4436] struct usb_device_id const __mod_usb_device_table ; [L4437] static struct workqueue_struct *cmndworkqueue ; [L4438] static struct workqueue_struct *pollworkqueue ; [L4439] static struct workqueue_struct *deadworkqueue ; [L6425-L6427] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6835-L6841] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6914] int ldv_retval_0 ; [L6916] int ldv_retval_1 ; [L6919] int ldv_retval_3 ; [L6920] int ldv_retval_2 ; [L8179] int URB_STATE = 0; [L8180] int DEV_STATE = 0; [L8181] int INTERF_STATE = 0; [L8182] int SERIAL_STATE = 0; [L8183] void *usb_intfdata = (void *)0; [L8184] struct urb *int_urb = (struct urb *)0; [L8185] struct urb *bulk_urb = (struct urb *)0; [L8186] void (*completeFnInt)(struct urb * ) ; [L8187] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7559] struct usb_device_id *ldvarg1 ; [L7560] void *tmp ; [L7561] pm_message_t ldvarg0 ; [L7562] struct mmc_card *ldvarg4 ; [L7563] void *tmp___0 ; [L7564] struct mmc_ios *ldvarg3 ; [L7565] void *tmp___1 ; [L7566] int ldvarg5 ; [L7567] struct mmc_request *ldvarg2 ; [L7568] void *tmp___2 ; [L7569] int tmp___3 ; [L7570] int tmp___4 ; [L7571] int tmp___5 ; [L7572] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={-36893488147419103233:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-36893488147419103233:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-36893488147419103233:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={-36893488147419103233:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] tmp = ldv_init_zalloc(32UL) [L7575] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={-18446744073709551617:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-18446744073709551617:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551617:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={-18446744073709551617:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] tmp___0 = ldv_init_zalloc(1816UL) [L7577] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={-92233720368547758081:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-92233720368547758081:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-92233720368547758081:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={-92233720368547758081:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] tmp___1 = ldv_init_zalloc(16UL) [L7579] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654847:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654847:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={-55340232221128654847:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654847:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654847:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={-55340232221128654847:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] tmp___2 = ldv_init_zalloc(136UL) [L7581] ldvarg2 = (struct mmc_request *)tmp___2 [L7582] FCALL ldv_initialize() [L7583] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={90:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={90:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={90:0}, s={90:0}, SERIAL_STATE=0, tmp={90:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7583] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={90:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={89:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={89:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={89:0}, s={89:0}, SERIAL_STATE=0, tmp={89:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={89:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7585] ldv_state_variable_6 = 1 [L7586] CALL work_init_3() [L6924] ldv_work_3_0 = 0 [L6925] ldv_work_3_1 = 0 [L6926] ldv_work_3_2 = 0 [L6927] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7586] RET work_init_3() [L7587] ldv_state_variable_3 = 1 [L7588] ldv_state_variable_7 = 0 [L7589] CALL work_init_2() [L6974] ldv_work_2_0 = 0 [L6975] ldv_work_2_1 = 0 [L6976] ldv_work_2_2 = 0 [L6977] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7589] RET work_init_2() [L7590] ldv_state_variable_2 = 1 [L7591] ldv_state_variable_8 = 0 [L7592] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7592] RET work_init_1() [L7593] ldv_state_variable_1 = 1 [L7594] ldv_state_variable_4 = 1 [L7595] ref_cnt = 0 [L7596] ldv_state_variable_0 = 1 [L7597] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=7, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: [L7752] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7753] COND TRUE ldv_state_variable_0 == 1 [L7754] CALL, EXPR vub300_init() [L6844] int result ; [L6845] struct lock_class_key __key ; [L6846] char const *__lock_name ; [L6847] struct workqueue_struct *tmp ; [L6848] struct lock_class_key __key___0 ; [L6849] char const *__lock_name___0 ; [L6850] struct workqueue_struct *tmp___0 ; [L6851] struct lock_class_key __key___1 ; [L6852] char const *__lock_name___1 ; [L6853] struct workqueue_struct *tmp___1 ; [L6857] __lock_name = "kvub300c" [L6858] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6859] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6860] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6866] __lock_name___0 = "kvub300p" [L6867] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6868] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6869] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6875] __lock_name___1 = "kvub300d" [L6876] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6877] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __key={91:0}, __key___0={93:0}, __key___1={94:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6878] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8081] ldv_func_ret_type___12 ldv_func_res ; [L8082] int tmp ; [L8084] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8556] return __VERIFIER_nondet_int(); [L8084] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8084] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8085] ldv_func_res = tmp [L8086] ldv_state_variable_7 = 1 [L8087] usb_counter = 0 [L8088] CALL ldv_usb_driver_7() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={-55340232221128654849:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-55340232221128654849:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-55340232221128654849:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={-55340232221128654849:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-55340232221128654849:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L8088] RET ldv_usb_driver_7() [L8089] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={8707:8706}, ldv_func_arg2={8707:8706}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6884] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6884] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6885] COND FALSE !(result != 0) [L6890] return (0); [L6890] return (0); [L6890] return (0); [L6890] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={-96:97}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={101:-100}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={99:-98}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={-96:97}, tmp___0={99:-98}, tmp___1={101:-100}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7754] RET, EXPR vub300_init() [L7754] ldv_retval_3 = vub300_init() [L7755] COND TRUE ldv_retval_3 == 0 [L7756] ldv_state_variable_0 = 3 [L7757] ldv_state_variable_8 = 1 [L7758] CALL ldv_initialize_mmc_host_ops_8() [L7193] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={-73786976294838206465:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, calloc(1UL, size)={-73786976294838206465:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-73786976294838206465:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={-73786976294838206465:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] tmp = ldv_init_zalloc(2624UL) [L7196] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-73786976294838206465:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7758] RET ldv_initialize_mmc_host_ops_8() [L7761] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=2, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7614] COND TRUE ldv_state_variable_7 != 0 [L7615] tmp___4 = __VERIFIER_nondet_int() [L7617] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7618] COND TRUE ldv_state_variable_7 == 1 [L7619] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6430] struct vub300_mmc_host *vub300 ; [L6431] struct usb_host_interface *iface_desc ; [L6432] struct usb_device *udev ; [L6433] struct usb_device *tmp ; [L6434] struct usb_device *tmp___0 ; [L6435] int i ; [L6436] int retval ; [L6437] struct urb *command_out_urb ; [L6438] struct urb *command_res_urb ; [L6439] struct mmc_host *mmc ; [L6440] char manufacturer[48U] ; [L6441] char product[32U] ; [L6442] char serial_number[32U] ; [L6443] void *tmp___1 ; [L6444] struct lock_class_key __key ; [L6445] struct lock_class_key __key___0 ; [L6446] int tmp___2 ; [L6447] struct usb_endpoint_descriptor *endpoint ; [L6448] int tmp___4 ; [L6449] char *tmp___5 ; [L6450] int tmp___6 ; [L6451] int tmp___7 ; [L6452] int tmp___8 ; [L6453] unsigned int tmp___9 ; [L6454] unsigned int tmp___10 ; [L6455] unsigned int tmp___11 ; [L6456] struct lock_class_key __key___1 ; [L6457] atomic_long_t __constr_expr_0 ; [L6458] struct lock_class_key __key___2 ; [L6459] atomic_long_t __constr_expr_1 ; [L6460] struct lock_class_key __key___3 ; [L6461] atomic_long_t __constr_expr_2 ; [L6462] int tmp___12 ; [L6463] int tmp___13 ; [L6465] CALL, EXPR interface_to_usbdev(interface) [L7824] struct usb_device *tmp ; [L7826] CALL, EXPR ldv_interface_to_usbdev() [L8302] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8307] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND FALSE !(tmp___0 != 0) [L4246] tmp = malloc(size) [L4247] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L4248] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, cond=1, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L4248] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L4249] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={-18446744073709551615:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={-18446744073709551615:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8307] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={-18446744073709551615:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8307] result = ldv_malloc(sizeof(struct usb_device)) [L8308] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8312] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, result={-18446744073709551615:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7826] RET, EXPR ldv_interface_to_usbdev() [L7826] tmp = ldv_interface_to_usbdev() [L7827] return (tmp); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={-55340232221128654849:0}, intf={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-18446744073709551615:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6465] RET, EXPR interface_to_usbdev(interface) [L6465] tmp = interface_to_usbdev(interface) [L6466] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8021] CALL ldv_get_dev(ldv_func_arg1) [L8318] DEV_STATE = DEV_STATE + 1 [L8319] return (data); VAL [={0:0}, ={0:0}, \result={-18446744073709551615:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, data={-18446744073709551615:0}, data={-18446744073709551615:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8021] RET ldv_get_dev(ldv_func_arg1) [L8022] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-18446744073709551615:0}, ldv_func_arg1={-18446744073709551615:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6466] RET, EXPR ldv_usb_get_dev_43(tmp) [L6466] tmp___0 = ldv_usb_get_dev_43(tmp) [L6467] udev = tmp___0 [L6468] retval = -12 [L6469] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103233:0}, id={-36893488147419103233:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=123, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6469-L6470] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=123, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={106:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6469-L6470] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103233:0}, id={-36893488147419103233:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=123, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=0, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6471] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103233:0}, id={-36893488147419103233:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6471] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=125, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={107:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6471] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103233:0}, id={-36893488147419103233:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=125, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=0, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6472] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103233:0}, id={-36893488147419103233:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6472-L6473] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=126, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0={0:0}, arg2={113:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6472-L6473] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={121:0}, __constr_expr_1={87:0}, __constr_expr_2={103:0}, __key={102:0}, __key___0={109:0}, __key___1={114:0}, __key___2={122:0}, __key___3={111:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103233:0}, id={-36893488147419103233:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={106:0}, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, product={107:0}, ref_cnt=0, retval=-12, serial_number={113:0}, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=126, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=0, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6475] udev->descriptor.idVendor [L6475] udev->descriptor.idProduct [L6477] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8027] ldv_func_ret_type___10 ldv_func_res ; [L8028] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8030] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8532] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND TRUE tmp___0 != 0 [L4244] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8532] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=0, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg0=0, arg1=208, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8532] return ldv_malloc(sizeof(struct urb)); [L8030] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8030] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8031] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8032] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8211] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8032] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8033] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=0, \old(ldv_func_arg2)=208, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=0, ldv_func_arg2=208, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6477] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6477] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6478] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6479] retval = -12 [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, command_out_urb={0:0}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={-36893488147419103233:0}, id={-36893488147419103233:0}, int_urb={0:0}, INTERF_STATE=0, interface={-55340232221128654849:0}, interface={-55340232221128654849:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, retval=-12, SERIAL_STATE=0, tmp={-18446744073709551615:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7619] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7619] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7620] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=7, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7745] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7746] CALL vub300_exit() [L6904] CALL ldv_usb_deregister_60(& vub300_driver) [L8119] FCALL usb_deregister(arg) [L8120] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, arg={86:0}, arg={86:0}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6904] RET ldv_usb_deregister_60(& vub300_driver) [L6905] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8127] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8128] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8128] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6905] RET ldv_flush_workqueue_61(cmndworkqueue) [L6906] CALL ldv_flush_workqueue_62(pollworkqueue) [L8135] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8136] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8136] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6906] RET ldv_flush_workqueue_62(pollworkqueue) [L6907] CALL ldv_flush_workqueue_63(deadworkqueue) [L8143] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8144] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8144] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6907] RET ldv_flush_workqueue_63(deadworkqueue) [L6908] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8151] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8152] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8152] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-96:97}, ldv_func_arg1={-96:97}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6908] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6909] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8159] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8160] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8160] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={99:-98}, ldv_func_arg1={99:-98}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6909] RET ldv_destroy_workqueue_65(pollworkqueue) [L6910] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8167] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8168] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=0, \old(ldv_timer_list_6)=0, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8168] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={101:-100}, ldv_func_arg1={101:-100}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L6910] RET ldv_destroy_workqueue_66(deadworkqueue) [L7746] RET vub300_exit() [L7747] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={90:0}, ldvarg1={-36893488147419103233:0}, ldvarg2={-55340232221128654847:0}, ldvarg3={-92233720368547758081:0}, ldvarg4={-18446744073709551617:0}, ldvarg5={89:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, tmp={-36893488147419103233:0}, tmp___0={-18446744073709551617:0}, tmp___1={-92233720368547758081:0}, tmp___2={-55340232221128654847:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L7788] CALL ldv_check_final_state() [L8380] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8384] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8385] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] [L8176] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={8707:8706}, bulk_urb={0:0}, cmndworkqueue={-96:97}, deadworkqueue={101:-100}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=-12, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={99:-98}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={-55340232221128654849:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={-73786976294838206465:0}, vub300_table={84:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1587 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 383.6s, OverallIterations: 20, TraceHistogramMax: 8, PathProgramHistogramMax: 3, EmptinessCheckTime: 0.5s, AutomataDifference: 336.6s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.1s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 77982 SdHoareTripleChecker+Valid, 311.1s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 74158 mSDsluCounter, 182590 SdHoareTripleChecker+Invalid, 278.9s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 138606 mSDsCounter, 53999 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 107619 IncrementalHoareTripleChecker+Invalid, 161618 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 53999 mSolverCounterUnsat, 43984 mSDtfsCounter, 107619 mSolverCounterSat, 1.4s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 3958 GetRequests, 3629 SyntacticMatches, 5 SemanticMatches, 324 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 1287 ImplicationChecksByTransitivity, 6.2s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=24675occurred in iteration=8, InterpolantAutomatonStates: 231, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 18.5s AutomataMinimizationTime, 19 MinimizatonAttempts, 37674 StatesRemovedByMinimization, 19 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 0.8s SsaConstructionTime, 4.5s SatisfiabilityAnalysisTime, 17.9s InterpolantComputationTime, 6236 NumberOfCodeBlocks, 6236 NumberOfCodeBlocksAsserted, 26 NumberOfCheckSat, 6820 ConstructedInterpolants, 0 QuantifiedInterpolants, 12960 SizeOfPredicates, 10 NumberOfNonLiveVariables, 13293 ConjunctsInSsa, 55 ConjunctsInUnsatCore, 27 InterpolantComputations, 16 PerfectInterpolantSequences, 7123/7245 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-20 06:10:45,197 WARN L435 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forcibly destroying the process [2021-11-20 06:10:45,221 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 137 Received shutdown request... --- End real Ultimate output --- Execution finished normally Using bit-precise analysis Retrying with bit-precise analysis ### Bit-precise run ### Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/config -Xmx15G -Xms4m -jar /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data -tc /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/config/AutomizerReach.xml -i ../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i -s /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(G ! call(reach_error())) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 64bit --witnessprinter.graph.data.programhash 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 --- Real Ultimate output --- This is Ultimate 0.2.1-dev-53f42b1 [2021-11-20 06:10:47,592 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-11-20 06:10:47,596 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-11-20 06:10:47,651 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-11-20 06:10:47,652 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-11-20 06:10:47,656 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-11-20 06:10:47,658 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-11-20 06:10:47,665 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-11-20 06:10:47,668 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-11-20 06:10:47,671 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-11-20 06:10:47,672 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-11-20 06:10:47,673 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-11-20 06:10:47,673 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-11-20 06:10:47,675 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-11-20 06:10:47,676 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-11-20 06:10:47,677 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-11-20 06:10:47,678 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-11-20 06:10:47,679 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-11-20 06:10:47,681 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-11-20 06:10:47,684 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-11-20 06:10:47,686 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-11-20 06:10:47,687 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-11-20 06:10:47,689 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-11-20 06:10:47,690 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-11-20 06:10:47,693 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-11-20 06:10:47,694 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-11-20 06:10:47,694 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-11-20 06:10:47,695 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-11-20 06:10:47,696 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-11-20 06:10:47,697 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-11-20 06:10:47,698 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-11-20 06:10:47,699 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-11-20 06:10:47,700 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-11-20 06:10:47,701 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-11-20 06:10:47,702 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-11-20 06:10:47,702 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-11-20 06:10:47,703 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-11-20 06:10:47,704 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-11-20 06:10:47,704 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-11-20 06:10:47,705 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-11-20 06:10:47,706 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-11-20 06:10:47,707 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/config/svcomp-Reach-64bit-Automizer_Bitvector.epf [2021-11-20 06:10:47,751 INFO L113 SettingsManager]: Loading preferences was successful [2021-11-20 06:10:47,751 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-11-20 06:10:47,752 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-11-20 06:10:47,752 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-11-20 06:10:47,753 INFO L136 SettingsManager]: Preferences of Boogie Procedure Inliner differ from their defaults: [2021-11-20 06:10:47,753 INFO L138 SettingsManager]: * Ignore calls to procedures called more than once=ONLY_FOR_SEQUENTIAL_PROGRAMS [2021-11-20 06:10:47,755 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-11-20 06:10:47,755 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-11-20 06:10:47,755 INFO L138 SettingsManager]: * Use SBE=true [2021-11-20 06:10:47,756 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-11-20 06:10:47,757 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-11-20 06:10:47,757 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=IGNORE [2021-11-20 06:10:47,757 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=IGNORE [2021-11-20 06:10:47,757 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=IGNORE [2021-11-20 06:10:47,758 INFO L138 SettingsManager]: * Adapt memory model on pointer casts if necessary=true [2021-11-20 06:10:47,758 INFO L138 SettingsManager]: * Use bitvectors instead of ints=true [2021-11-20 06:10:47,758 INFO L138 SettingsManager]: * Memory model=HoenickeLindenmann_4ByteResolution [2021-11-20 06:10:47,758 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-11-20 06:10:47,759 INFO L138 SettingsManager]: * Use constant arrays=true [2021-11-20 06:10:47,759 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=IGNORE [2021-11-20 06:10:47,759 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-11-20 06:10:47,759 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-11-20 06:10:47,759 INFO L138 SettingsManager]: * SMT solver=External_DefaultMode [2021-11-20 06:10:47,760 INFO L138 SettingsManager]: * Command for external solver=z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:10:47,760 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-11-20 06:10:47,760 INFO L138 SettingsManager]: * Compute Interpolants along a Counterexample=FPandBP [2021-11-20 06:10:47,761 INFO L138 SettingsManager]: * Positions where we compute the Hoare Annotation=LoopsAndPotentialCycles [2021-11-20 06:10:47,761 INFO L138 SettingsManager]: * Trace refinement strategy=WOLF [2021-11-20 06:10:47,761 INFO L138 SettingsManager]: * Command for external solver=cvc4 --incremental --print-success --lang smt [2021-11-20 06:10:47,761 INFO L138 SettingsManager]: * Large block encoding in concurrent analysis=OFF [2021-11-20 06:10:47,762 INFO L138 SettingsManager]: * Automaton type used in concurrency analysis=PETRI_NET [2021-11-20 06:10:47,762 INFO L138 SettingsManager]: * Compute Hoare Annotation of negated interpolant automaton, abstraction and CFG=true [2021-11-20 06:10:47,762 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-11-20 06:10:47,762 INFO L138 SettingsManager]: * SMT solver=External_ModelsAndUnsatCoreMode [2021-11-20 06:10:47,763 INFO L138 SettingsManager]: * Logic for external solver=AUFBV WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(G ! call(reach_error())) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 64bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79172d5077d4821f59ec3ee2d8a7cf5ca2cb3c5c1b82d4680e26c94b2b62bba2 [2021-11-20 06:10:48,156 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-11-20 06:10:48,183 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-11-20 06:10:48,186 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-11-20 06:10:48,187 INFO L271 PluginConnector]: Initializing CDTParser... [2021-11-20 06:10:48,187 INFO L275 PluginConnector]: CDTParser initialized [2021-11-20 06:10:48,189 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/../../sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-20 06:10:48,272 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/894be2298/e3c4049d80904c288adb00a7887aae5a/FLAG1a34d9ba1 [2021-11-20 06:10:49,245 INFO L306 CDTParser]: Found 1 translation units. [2021-11-20 06:10:49,246 INFO L160 CDTParser]: Scanning /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-20 06:10:49,307 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/894be2298/e3c4049d80904c288adb00a7887aae5a/FLAG1a34d9ba1 [2021-11-20 06:10:49,682 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/data/894be2298/e3c4049d80904c288adb00a7887aae5a [2021-11-20 06:10:49,684 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-11-20 06:10:49,685 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-11-20 06:10:49,693 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-11-20 06:10:49,694 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-11-20 06:10:49,696 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-11-20 06:10:49,697 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:10:49" (1/1) ... [2021-11-20 06:10:49,698 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@7cd65fbe and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:49, skipping insertion in model container [2021-11-20 06:10:49,698 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 06:10:49" (1/1) ... [2021-11-20 06:10:49,705 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-11-20 06:10:49,855 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:10:51,907 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-20 06:10:51,959 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:10:52,022 INFO L200 MainTranslator]: Restarting translation with changed settings: SettingsChange [mNewPreferredMemoryModel=HoenickeLindenmann_1ByteResolution] [2021-11-20 06:10:52,068 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-11-20 06:10:52,499 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-20 06:10:52,525 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:10:52,542 INFO L203 MainTranslator]: Completed pre-run [2021-11-20 06:10:52,923 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/sv-benchmarks/c/ldv-validator-v0.8/linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i[239738,239751] [2021-11-20 06:10:52,951 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-11-20 06:10:53,087 INFO L208 MainTranslator]: Completed translation [2021-11-20 06:10:53,088 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53 WrapperNode [2021-11-20 06:10:53,088 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-11-20 06:10:53,089 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-11-20 06:10:53,089 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-11-20 06:10:53,090 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-11-20 06:10:53,097 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,210 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,402 INFO L137 Inliner]: procedures = 275, calls = 1808, calls flagged for inlining = 104, calls inlined = 100, statements flattened = 4401 [2021-11-20 06:10:53,403 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-11-20 06:10:53,404 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-11-20 06:10:53,404 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-11-20 06:10:53,405 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-11-20 06:10:53,414 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,414 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,521 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,524 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,670 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,717 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,754 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,791 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-11-20 06:10:53,793 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-11-20 06:10:53,794 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-11-20 06:10:53,795 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-11-20 06:10:53,795 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (1/1) ... [2021-11-20 06:10:53,803 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 [2021-11-20 06:10:53,814 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 [2021-11-20 06:10:53,826 INFO L229 MonitoredProcess]: Starting monitored process 1 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (exit command is (exit), workingDir is null) [2021-11-20 06:10:53,857 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Waiting until timeout for monitored process [2021-11-20 06:10:53,874 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE1 [2021-11-20 06:10:53,875 INFO L130 BoogieDeclarations]: Found specification of procedure msleep [2021-11-20 06:10:53,875 INFO L138 BoogieDeclarations]: Found implementation of procedure msleep [2021-11-20 06:10:53,875 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE8 [2021-11-20 06:10:53,875 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE4 [2021-11-20 06:10:53,875 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~$Pointer$ [2021-11-20 06:10:53,876 INFO L130 BoogieDeclarations]: Found specification of procedure read~intINTTYPE2 [2021-11-20 06:10:53,876 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~$Pointer$ [2021-11-20 06:10:53,876 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_stop [2021-11-20 06:10:53,876 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_stop [2021-11-20 06:10:53,876 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.meminit [2021-11-20 06:10:53,876 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.meminit [2021-11-20 06:10:53,877 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_delete [2021-11-20 06:10:53,877 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_delete [2021-11-20 06:10:53,877 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_fill_bulk_urb_11 [2021-11-20 06:10:53,877 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_fill_bulk_urb_11 [2021-11-20 06:10:53,877 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_wait [2021-11-20 06:10:53,877 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_wait [2021-11-20 06:10:53,878 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_usb_bulk_msg [2021-11-20 06:10:53,878 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_usb_bulk_msg [2021-11-20 06:10:53,878 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_submit_urb [2021-11-20 06:10:53,878 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_submit_urb [2021-11-20 06:10:53,878 INFO L130 BoogieDeclarations]: Found specification of procedure wait_for_completion_timeout [2021-11-20 06:10:53,878 INFO L138 BoogieDeclarations]: Found implementation of procedure wait_for_completion_timeout [2021-11-20 06:10:53,879 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_malloc [2021-11-20 06:10:53,879 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_malloc [2021-11-20 06:10:53,879 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_alloc_urb [2021-11-20 06:10:53,879 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_alloc_urb [2021-11-20 06:10:53,879 INFO L130 BoogieDeclarations]: Found specification of procedure destroy_workqueue [2021-11-20 06:10:53,879 INFO L138 BoogieDeclarations]: Found implementation of procedure destroy_workqueue [2021-11-20 06:10:53,880 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_signal_sdio_irq [2021-11-20 06:10:53,880 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_signal_sdio_irq [2021-11-20 06:10:53,880 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_unlock [2021-11-20 06:10:53,881 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_unlock [2021-11-20 06:10:53,881 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_error [2021-11-20 06:10:53,881 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_error [2021-11-20 06:10:53,881 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memset [2021-11-20 06:10:53,881 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memset [2021-11-20 06:10:53,882 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_get_intfdata_49 [2021-11-20 06:10:53,882 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_get_intfdata_49 [2021-11-20 06:10:53,882 INFO L130 BoogieDeclarations]: Found specification of procedure assume_abort_if_not [2021-11-20 06:10:53,882 INFO L138 BoogieDeclarations]: Found implementation of procedure assume_abort_if_not [2021-11-20 06:10:53,882 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_detect_change [2021-11-20 06:10:53,882 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_detect_change [2021-11-20 06:10:53,883 INFO L130 BoogieDeclarations]: Found specification of procedure del_timer [2021-11-20 06:10:53,883 INFO L138 BoogieDeclarations]: Found implementation of procedure del_timer [2021-11-20 06:10:53,883 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_cancel [2021-11-20 06:10:53,883 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_cancel [2021-11-20 06:10:53,884 INFO L130 BoogieDeclarations]: Found specification of procedure usb_sg_init [2021-11-20 06:10:53,884 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_sg_init [2021-11-20 06:10:53,885 INFO L130 BoogieDeclarations]: Found specification of procedure __command_read_data [2021-11-20 06:10:53,886 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_read_data [2021-11-20 06:10:53,886 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_26 [2021-11-20 06:10:53,886 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_26 [2021-11-20 06:10:53,886 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2021-11-20 06:10:53,886 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_28 [2021-11-20 06:10:53,886 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_28 [2021-11-20 06:10:53,887 INFO L130 BoogieDeclarations]: Found specification of procedure INIT_LIST_HEAD [2021-11-20 06:10:53,887 INFO L138 BoogieDeclarations]: Found implementation of procedure INIT_LIST_HEAD [2021-11-20 06:10:53,887 INFO L130 BoogieDeclarations]: Found specification of procedure usb_unlink_urb [2021-11-20 06:10:53,888 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_unlink_urb [2021-11-20 06:10:53,888 INFO L130 BoogieDeclarations]: Found specification of procedure read~$Pointer$ [2021-11-20 06:10:53,888 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_12 [2021-11-20 06:10:53,888 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_12 [2021-11-20 06:10:53,888 INFO L130 BoogieDeclarations]: Found specification of procedure add_timer [2021-11-20 06:10:53,888 INFO L138 BoogieDeclarations]: Found implementation of procedure add_timer [2021-11-20 06:10:53,889 INFO L130 BoogieDeclarations]: Found specification of procedure irqpoll_out_completed [2021-11-20 06:10:53,889 INFO L138 BoogieDeclarations]: Found implementation of procedure irqpoll_out_completed [2021-11-20 06:10:53,889 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_disconnect [2021-11-20 06:10:53,889 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_disconnect [2021-11-20 06:10:53,889 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_14 [2021-11-20 06:10:53,889 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_14 [2021-11-20 06:10:53,890 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_work_3 [2021-11-20 06:10:53,890 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_work_3 [2021-11-20 06:10:53,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE8 [2021-11-20 06:10:53,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE1 [2021-11-20 06:10:53,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE2 [2021-11-20 06:10:53,891 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.dealloc [2021-11-20 06:10:53,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~intINTTYPE4 [2021-11-20 06:10:53,891 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~$Pointer$ [2021-11-20 06:10:53,892 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE2 [2021-11-20 06:10:53,892 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE1 [2021-11-20 06:10:53,892 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE4 [2021-11-20 06:10:53,893 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~intINTTYPE8 [2021-11-20 06:10:53,893 INFO L130 BoogieDeclarations]: Found specification of procedure __mutex_init [2021-11-20 06:10:53,893 INFO L138 BoogieDeclarations]: Found implementation of procedure __mutex_init [2021-11-20 06:10:53,893 INFO L130 BoogieDeclarations]: Found specification of procedure kmalloc [2021-11-20 06:10:53,893 INFO L138 BoogieDeclarations]: Found implementation of procedure kmalloc [2021-11-20 06:10:53,894 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_enable_sdio_irq [2021-11-20 06:10:53,895 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_enable_sdio_irq [2021-11-20 06:10:53,895 INFO L130 BoogieDeclarations]: Found specification of procedure mutex_lock_nested [2021-11-20 06:10:53,895 INFO L138 BoogieDeclarations]: Found implementation of procedure mutex_lock_nested [2021-11-20 06:10:53,896 INFO L130 BoogieDeclarations]: Found specification of procedure lockdep_init_map [2021-11-20 06:10:53,896 INFO L138 BoogieDeclarations]: Found implementation of procedure lockdep_init_map [2021-11-20 06:10:53,896 INFO L130 BoogieDeclarations]: Found specification of procedure add_offloaded_reg [2021-11-20 06:10:53,896 INFO L138 BoogieDeclarations]: Found implementation of procedure add_offloaded_reg [2021-11-20 06:10:53,897 INFO L130 BoogieDeclarations]: Found specification of procedure release_firmware [2021-11-20 06:10:53,897 INFO L138 BoogieDeclarations]: Found implementation of procedure release_firmware [2021-11-20 06:10:53,897 INFO L130 BoogieDeclarations]: Found specification of procedure command_out_completed [2021-11-20 06:10:53,897 INFO L138 BoogieDeclarations]: Found implementation of procedure command_out_completed [2021-11-20 06:10:53,897 INFO L130 BoogieDeclarations]: Found specification of procedure roundup_to_multiple_of_64 [2021-11-20 06:10:53,897 INFO L138 BoogieDeclarations]: Found implementation of procedure roundup_to_multiple_of_64 [2021-11-20 06:10:53,898 INFO L130 BoogieDeclarations]: Found specification of procedure flush_workqueue [2021-11-20 06:10:53,898 INFO L138 BoogieDeclarations]: Found implementation of procedure flush_workqueue [2021-11-20 06:10:53,898 INFO L130 BoogieDeclarations]: Found specification of procedure usb_alloc_urb [2021-11-20 06:10:53,898 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_alloc_urb [2021-11-20 06:10:53,899 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_cmndwork_thread [2021-11-20 06:10:53,899 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_cmndwork_thread [2021-11-20 06:10:53,899 INFO L130 BoogieDeclarations]: Found specification of procedure send_command [2021-11-20 06:10:53,899 INFO L138 BoogieDeclarations]: Found implementation of procedure send_command [2021-11-20 06:10:53,900 INFO L130 BoogieDeclarations]: Found specification of procedure kref_get [2021-11-20 06:10:53,900 INFO L138 BoogieDeclarations]: Found implementation of procedure kref_get [2021-11-20 06:10:53,903 INFO L130 BoogieDeclarations]: Found specification of procedure activate_pending_timer_6 [2021-11-20 06:10:53,903 INFO L138 BoogieDeclarations]: Found implementation of procedure activate_pending_timer_6 [2021-11-20 06:10:53,903 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_xfer_bulk [2021-11-20 06:10:53,903 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_xfer_bulk [2021-11-20 06:10:53,904 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.C_memcpy [2021-11-20 06:10:53,906 INFO L138 BoogieDeclarations]: Found implementation of procedure #Ultimate.C_memcpy [2021-11-20 06:10:53,906 INFO L130 BoogieDeclarations]: Found specification of procedure __create_pipe [2021-11-20 06:10:53,906 INFO L138 BoogieDeclarations]: Found implementation of procedure __create_pipe [2021-11-20 06:10:53,907 INFO L130 BoogieDeclarations]: Found specification of procedure send_irqpoll [2021-11-20 06:10:53,912 INFO L138 BoogieDeclarations]: Found implementation of procedure send_irqpoll [2021-11-20 06:10:53,913 INFO L130 BoogieDeclarations]: Found specification of procedure usb_kill_urb [2021-11-20 06:10:53,913 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_kill_urb [2021-11-20 06:10:53,913 INFO L130 BoogieDeclarations]: Found specification of procedure kfree [2021-11-20 06:10:53,913 INFO L138 BoogieDeclarations]: Found implementation of procedure kfree [2021-11-20 06:10:53,913 INFO L130 BoogieDeclarations]: Found specification of procedure init_completion [2021-11-20 06:10:53,913 INFO L138 BoogieDeclarations]: Found implementation of procedure init_completion [2021-11-20 06:10:53,914 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_response_error [2021-11-20 06:10:53,914 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_response_error [2021-11-20 06:10:53,914 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE4 [2021-11-20 06:10:53,914 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_out [2021-11-20 06:10:53,914 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_out [2021-11-20 06:10:53,914 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE2 [2021-11-20 06:10:53,914 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE1 [2021-11-20 06:10:53,915 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_free_host [2021-11-20 06:10:53,915 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_free_host [2021-11-20 06:10:53,915 INFO L130 BoogieDeclarations]: Found specification of procedure write~unchecked~intINTTYPE8 [2021-11-20 06:10:53,915 INFO L130 BoogieDeclarations]: Found specification of procedure ldv__builtin_expect [2021-11-20 06:10:53,915 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv__builtin_expect [2021-11-20 06:10:53,915 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_submit_urb_31 [2021-11-20 06:10:53,915 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_submit_urb_31 [2021-11-20 06:10:53,915 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_init_zalloc [2021-11-20 06:10:53,916 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_init_zalloc [2021-11-20 06:10:53,916 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnHeap [2021-11-20 06:10:53,916 INFO L130 BoogieDeclarations]: Found specification of procedure disable_suitable_timer_6 [2021-11-20 06:10:53,916 INFO L138 BoogieDeclarations]: Found implementation of procedure disable_suitable_timer_6 [2021-11-20 06:10:53,916 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_queue_poll_work [2021-11-20 06:10:53,916 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_queue_poll_work [2021-11-20 06:10:53,916 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_memset [2021-11-20 06:10:53,917 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_memset [2021-11-20 06:10:53,917 INFO L130 BoogieDeclarations]: Found specification of procedure complete [2021-11-20 06:10:53,917 INFO L138 BoogieDeclarations]: Found implementation of procedure complete [2021-11-20 06:10:53,917 INFO L130 BoogieDeclarations]: Found specification of procedure usb_endpoint_is_bulk_in [2021-11-20 06:10:53,917 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_endpoint_is_bulk_in [2021-11-20 06:10:53,917 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-11-20 06:10:53,917 INFO L130 BoogieDeclarations]: Found specification of procedure sg_copy_to_buffer [2021-11-20 06:10:53,918 INFO L138 BoogieDeclarations]: Found implementation of procedure sg_copy_to_buffer [2021-11-20 06:10:53,918 INFO L130 BoogieDeclarations]: Found specification of procedure reg_timer_6 [2021-11-20 06:10:53,918 INFO L138 BoogieDeclarations]: Found implementation of procedure reg_timer_6 [2021-11-20 06:10:53,918 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_kref_put_8 [2021-11-20 06:10:53,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_kref_put_8 [2021-11-20 06:10:53,918 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_undef_int [2021-11-20 06:10:53,918 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_undef_int [2021-11-20 06:10:53,918 INFO L130 BoogieDeclarations]: Found specification of procedure write~$Pointer$ [2021-11-20 06:10:53,919 INFO L130 BoogieDeclarations]: Found specification of procedure __download_offload_pseudocode [2021-11-20 06:10:53,919 INFO L138 BoogieDeclarations]: Found implementation of procedure __download_offload_pseudocode [2021-11-20 06:10:53,919 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE8 [2021-11-20 06:10:53,919 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-11-20 06:10:53,919 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~X~C_INT~TO~VOID [2021-11-20 06:10:53,919 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE2 [2021-11-20 06:10:53,919 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:10:53,920 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~$Pointer$~TO~VOID [2021-11-20 06:10:53,920 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE4 [2021-11-20 06:10:53,920 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_pollwork_thread [2021-11-20 06:10:53,920 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_pollwork_thread [2021-11-20 06:10:53,920 INFO L130 BoogieDeclarations]: Found specification of procedure interface_to_InterfaceNumber [2021-11-20 06:10:53,920 INFO L138 BoogieDeclarations]: Found implementation of procedure interface_to_InterfaceNumber [2021-11-20 06:10:53,920 INFO L130 BoogieDeclarations]: Found specification of procedure usb_control_msg [2021-11-20 06:10:53,921 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_control_msg [2021-11-20 06:10:53,921 INFO L130 BoogieDeclarations]: Found specification of procedure mod_timer [2021-11-20 06:10:53,921 INFO L138 BoogieDeclarations]: Found implementation of procedure mod_timer [2021-11-20 06:10:53,921 INFO L130 BoogieDeclarations]: Found specification of procedure usb_free_urb [2021-11-20 06:10:53,921 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_free_urb [2021-11-20 06:10:53,921 INFO L130 BoogieDeclarations]: Found specification of procedure __do_poll [2021-11-20 06:10:53,921 INFO L138 BoogieDeclarations]: Found implementation of procedure __do_poll [2021-11-20 06:10:53,921 INFO L130 BoogieDeclarations]: Found specification of procedure call_and_disable_all_3 [2021-11-20 06:10:53,922 INFO L138 BoogieDeclarations]: Found implementation of procedure call_and_disable_all_3 [2021-11-20 06:10:53,922 INFO L130 BoogieDeclarations]: Found specification of procedure new_system_port_status [2021-11-20 06:10:53,922 INFO L138 BoogieDeclarations]: Found implementation of procedure new_system_port_status [2021-11-20 06:10:53,922 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_request_done [2021-11-20 06:10:53,922 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_request_done [2021-11-20 06:10:53,922 INFO L130 BoogieDeclarations]: Found specification of procedure __init_work [2021-11-20 06:10:53,922 INFO L138 BoogieDeclarations]: Found implementation of procedure __init_work [2021-11-20 06:10:53,923 INFO L130 BoogieDeclarations]: Found specification of procedure msecs_to_jiffies [2021-11-20 06:10:53,923 INFO L138 BoogieDeclarations]: Found implementation of procedure msecs_to_jiffies [2021-11-20 06:10:53,923 INFO L130 BoogieDeclarations]: Found specification of procedure __command_write_data [2021-11-20 06:10:53,923 INFO L138 BoogieDeclarations]: Found implementation of procedure __command_write_data [2021-11-20 06:10:53,923 INFO L130 BoogieDeclarations]: Found specification of procedure request_firmware [2021-11-20 06:10:53,923 INFO L138 BoogieDeclarations]: Found implementation of procedure request_firmware [2021-11-20 06:10:53,923 INFO L130 BoogieDeclarations]: Found specification of procedure ##fun~C_ULONG~TO~VOID [2021-11-20 06:10:53,924 INFO L138 BoogieDeclarations]: Found implementation of procedure ##fun~C_ULONG~TO~VOID [2021-11-20 06:10:53,924 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_usb_set_intfdata_46 [2021-11-20 06:10:53,924 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_usb_set_intfdata_46 [2021-11-20 06:10:53,924 INFO L130 BoogieDeclarations]: Found specification of procedure ldv_free_urb [2021-11-20 06:10:53,924 INFO L138 BoogieDeclarations]: Found implementation of procedure ldv_free_urb [2021-11-20 06:10:53,924 INFO L130 BoogieDeclarations]: Found specification of procedure read~unchecked~intINTTYPE1 [2021-11-20 06:10:53,924 INFO L130 BoogieDeclarations]: Found specification of procedure usb_string [2021-11-20 06:10:53,925 INFO L138 BoogieDeclarations]: Found implementation of procedure usb_string [2021-11-20 06:10:53,925 INFO L130 BoogieDeclarations]: Found specification of procedure mmc_priv [2021-11-20 06:10:53,925 INFO L138 BoogieDeclarations]: Found implementation of procedure mmc_priv [2021-11-20 06:10:53,925 INFO L130 BoogieDeclarations]: Found specification of procedure queue_work [2021-11-20 06:10:53,925 INFO L138 BoogieDeclarations]: Found implementation of procedure queue_work [2021-11-20 06:10:53,925 INFO L130 BoogieDeclarations]: Found specification of procedure vub300_deadwork_thread [2021-11-20 06:10:53,925 INFO L138 BoogieDeclarations]: Found implementation of procedure vub300_deadwork_thread [2021-11-20 06:10:53,925 INFO L130 BoogieDeclarations]: Found specification of procedure check_vub300_port_status [2021-11-20 06:10:53,926 INFO L138 BoogieDeclarations]: Found implementation of procedure check_vub300_port_status [2021-11-20 06:10:53,926 INFO L130 BoogieDeclarations]: Found specification of procedure strncpy [2021-11-20 06:10:53,926 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-11-20 06:10:53,926 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-11-20 06:10:54,860 INFO L236 CfgBuilder]: Building ICFG [2021-11-20 06:10:54,863 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-11-20 06:11:04,252 INFO L768 $ProcedureCfgBuilder]: dead code at ProgramPoint ldv_stopFINAL: assume true; [2021-11-20 06:11:51,901 INFO L277 CfgBuilder]: Performing block encoding [2021-11-20 06:11:51,924 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-11-20 06:11:51,925 INFO L301 CfgBuilder]: Removed 0 assume(true) statements. [2021-11-20 06:11:51,930 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:11:51 BoogieIcfgContainer [2021-11-20 06:11:51,930 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-11-20 06:11:51,932 INFO L113 PluginConnector]: ------------------------TraceAbstraction---------------------------- [2021-11-20 06:11:51,933 INFO L271 PluginConnector]: Initializing TraceAbstraction... [2021-11-20 06:11:51,936 INFO L275 PluginConnector]: TraceAbstraction initialized [2021-11-20 06:11:51,936 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "CDTParser AST 20.11 06:10:49" (1/3) ... [2021-11-20 06:11:51,937 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@723afb2c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:11:51, skipping insertion in model container [2021-11-20 06:11:51,937 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 06:10:53" (2/3) ... [2021-11-20 06:11:51,937 INFO L205 PluginConnector]: Invalid model from TraceAbstraction for observer de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction.TraceAbstractionObserver@723afb2c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction AST 20.11 06:11:51, skipping insertion in model container [2021-11-20 06:11:51,937 INFO L185 PluginConnector]: Executing the observer TraceAbstractionObserver from plugin TraceAbstraction for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:11:51" (3/3) ... [2021-11-20 06:11:51,939 INFO L111 eAbstractionObserver]: Analyzing ICFG linux-stable-5fdb450-1-144_1a-drivers--mmc--host--vub300.ko-entry_point_ldv-val-v0.8.cil.out.i [2021-11-20 06:11:51,945 INFO L204 ceAbstractionStarter]: Automizer settings: Hoare:true NWA Interpolation:FPandBP Determinization: PREDICATE_ABSTRACTION [2021-11-20 06:11:51,945 INFO L163 ceAbstractionStarter]: Applying trace abstraction to program that has 1 error locations. [2021-11-20 06:11:52,011 INFO L338 AbstractCegarLoop]: ======== Iteration 0 == of CEGAR loop == AllErrorsAtOnce ======== [2021-11-20 06:11:52,018 INFO L339 AbstractCegarLoop]: Settings: SEPARATE_VIOLATION_CHECK=true, mInterprocedural=true, mMaxIterations=1000000, mWatchIteration=1000000, mArtifact=RCFG, mInterpolation=FPandBP, mInterpolantAutomaton=STRAIGHT_LINE, mDumpAutomata=false, mAutomataFormat=ATS_NUMERATE, mDumpPath=., mDeterminiation=PREDICATE_ABSTRACTION, mMinimize=MINIMIZE_SEVPA, mHoare=true, mAutomataTypeConcurrency=PETRI_NET, mHoareTripleChecks=INCREMENTAL, mHoareAnnotationPositions=LoopsAndPotentialCycles, mDumpOnlyReuseAutomata=false, mLimitTraceHistogram=0, mErrorLocTimeLimit=0, mLimitPathProgramCount=0, mCollectInterpolantStatistics=true, mHeuristicEmptinessCheck=false, mHeuristicEmptinessCheckAStarHeuristic=ZERO, mHeuristicEmptinessCheckAStarHeuristicRandomSeed=1337, mHeuristicEmptinessCheckSmtFeatureScoringMethod=DAGSIZE, mSMTFeatureExtraction=false, mSMTFeatureExtractionDumpPath=., mOverrideInterpolantAutomaton=false, mMcrInterpolantMethod=WP, mLoopAccelerationTechnique=FAST_UPR [2021-11-20 06:11:52,018 INFO L340 AbstractCegarLoop]: Starting to check reachability of 1 error locations. [2021-11-20 06:11:52,085 INFO L276 IsEmpty]: Start isEmpty. Operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) [2021-11-20 06:11:52,114 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-20 06:11:52,114 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:11:52,115 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:11:52,116 INFO L402 AbstractCegarLoop]: === Iteration 1 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:11:52,121 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:11:52,122 INFO L85 PathProgramCache]: Analyzing trace with hash -1113157247, now seen corresponding path program 1 times [2021-11-20 06:11:52,140 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:11:52,141 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [342635819] [2021-11-20 06:11:52,141 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:11:52,142 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:11:52,142 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:11:52,145 INFO L229 MonitoredProcess]: Starting monitored process 2 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:11:52,174 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Waiting until timeout for monitored process [2021-11-20 06:11:52,988 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:11:53,012 INFO L263 TraceCheckSpWp]: Trace formula consists of 897 conjuncts, 1 conjunts are in the unsatisfiable core [2021-11-20 06:11:53,022 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:11:53,892 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 51 proven. 0 refuted. 0 times theorem prover too weak. 42 trivial. 0 not checked. [2021-11-20 06:11:53,893 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:11:54,559 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 5 proven. 10 refuted. 0 times theorem prover too weak. 78 trivial. 0 not checked. [2021-11-20 06:11:54,560 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:11:54,560 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [342635819] [2021-11-20 06:11:54,561 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [342635819] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-20 06:11:54,561 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:11:54,561 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2] imperfect sequences [2] total 2 [2021-11-20 06:11:54,563 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [427186906] [2021-11-20 06:11:54,564 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:11:54,568 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 2 states [2021-11-20 06:11:54,568 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:11:54,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 2 interpolants. [2021-11-20 06:11:54,597 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 06:11:54,603 INFO L87 Difference]: Start difference. First operand has 1586 states, 1107 states have (on average 1.3965672990063234) internal successors, (1546), 1173 states have internal predecessors, (1546), 384 states have call successors, (384), 94 states have call predecessors, (384), 93 states have return successors, (375), 349 states have call predecessors, (375), 375 states have call successors, (375) Second operand has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:11:54,783 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:11:54,784 INFO L93 Difference]: Finished difference Result 3167 states and 4665 transitions. [2021-11-20 06:11:54,785 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2021-11-20 06:11:54,786 INFO L78 Accepts]: Start accepts. Automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) Word has length 114 [2021-11-20 06:11:54,787 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:11:54,820 INFO L225 Difference]: With dead ends: 3167 [2021-11-20 06:11:54,820 INFO L226 Difference]: Without dead ends: 1570 [2021-11-20 06:11:54,837 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 226 GetRequests, 226 SyntacticMatches, 0 SemanticMatches, 0 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=1, Invalid=1, Unknown=0, NotChecked=0, Total=2 [2021-11-20 06:11:54,840 INFO L933 BasicCegarLoop]: 2298 mSDtfsCounter, 0 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 0 SdHoareTripleChecker+Valid, 2298 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:11:54,841 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [0 Valid, 2298 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:11:54,864 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1570 states. [2021-11-20 06:11:54,991 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1570 to 1570. [2021-11-20 06:11:54,997 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1570 states, 1102 states have (on average 1.3874773139745917) internal successors, (1529), 1157 states have internal predecessors, (1529), 375 states have call successors, (375), 93 states have call predecessors, (375), 92 states have return successors, (371), 345 states have call predecessors, (371), 371 states have call successors, (371) [2021-11-20 06:11:55,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1570 states to 1570 states and 2275 transitions. [2021-11-20 06:11:55,072 INFO L78 Accepts]: Start accepts. Automaton has 1570 states and 2275 transitions. Word has length 114 [2021-11-20 06:11:55,073 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:11:55,073 INFO L470 AbstractCegarLoop]: Abstraction has 1570 states and 2275 transitions. [2021-11-20 06:11:55,073 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 2 states, 2 states have (on average 29.0) internal successors, (58), 2 states have internal predecessors, (58), 2 states have call successors, (12), 2 states have call predecessors, (12), 2 states have return successors, (12), 2 states have call predecessors, (12), 2 states have call successors, (12) [2021-11-20 06:11:55,073 INFO L276 IsEmpty]: Start isEmpty. Operand 1570 states and 2275 transitions. [2021-11-20 06:11:55,079 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 115 [2021-11-20 06:11:55,079 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:11:55,079 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:11:55,103 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (2)] Forceful destruction successful, exit code 0 [2021-11-20 06:11:55,293 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 2 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:11:55,293 INFO L402 AbstractCegarLoop]: === Iteration 2 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:11:55,295 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:11:55,296 INFO L85 PathProgramCache]: Analyzing trace with hash 981574537, now seen corresponding path program 1 times [2021-11-20 06:11:55,297 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:11:55,298 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [726146023] [2021-11-20 06:11:55,298 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:11:55,298 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:11:55,298 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:11:55,299 INFO L229 MonitoredProcess]: Starting monitored process 3 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:11:55,344 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Waiting until timeout for monitored process [2021-11-20 06:11:56,025 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:11:56,058 INFO L263 TraceCheckSpWp]: Trace formula consists of 897 conjuncts, 5 conjunts are in the unsatisfiable core [2021-11-20 06:11:56,063 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:11:56,853 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 9 proven. 0 refuted. 0 times theorem prover too weak. 84 trivial. 0 not checked. [2021-11-20 06:11:56,854 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:11:58,366 INFO L134 CoverageAnalysis]: Checked inductivity of 93 backedges. 0 proven. 7 refuted. 0 times theorem prover too weak. 86 trivial. 0 not checked. [2021-11-20 06:11:58,367 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:11:58,367 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [726146023] [2021-11-20 06:11:58,367 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [726146023] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-20 06:11:58,367 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:11:58,367 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [6] total 9 [2021-11-20 06:11:58,368 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [31052984] [2021-11-20 06:11:58,368 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:11:58,371 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 6 states [2021-11-20 06:11:58,371 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:11:58,371 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2021-11-20 06:11:58,372 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=21, Invalid=51, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:11:58,372 INFO L87 Difference]: Start difference. First operand 1570 states and 2275 transitions. Second operand has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-20 06:11:59,227 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:11:59,227 INFO L93 Difference]: Finished difference Result 3134 states and 4545 transitions. [2021-11-20 06:11:59,229 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:11:59,229 INFO L78 Accepts]: Start accepts. Automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) Word has length 114 [2021-11-20 06:11:59,230 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:11:59,245 INFO L225 Difference]: With dead ends: 3134 [2021-11-20 06:11:59,245 INFO L226 Difference]: Without dead ends: 1573 [2021-11-20 06:11:59,254 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 228 GetRequests, 219 SyntacticMatches, 0 SemanticMatches, 9 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.6s TimeCoverageRelationStatistics Valid=32, Invalid=78, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:11:59,256 INFO L933 BasicCegarLoop]: 2266 mSDtfsCounter, 6 mSDsluCounter, 9050 mSDsCounter, 0 mSdLazyCounter, 54 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.5s Time, 0 mProtectedPredicate, 0 mProtectedAction, 8 SdHoareTripleChecker+Valid, 11316 SdHoareTripleChecker+Invalid, 55 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 54 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:11:59,256 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [8 Valid, 11316 Invalid, 55 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 54 Invalid, 0 Unknown, 0 Unchecked, 0.5s Time] [2021-11-20 06:11:59,261 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1573 states. [2021-11-20 06:11:59,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1573 to 1573. [2021-11-20 06:11:59,331 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1573 states, 1104 states have (on average 1.3876811594202898) internal successors, (1532), 1160 states have internal predecessors, (1532), 375 states have call successors, (375), 93 states have call predecessors, (375), 93 states have return successors, (375), 345 states have call predecessors, (375), 371 states have call successors, (375) [2021-11-20 06:11:59,348 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1573 states to 1573 states and 2282 transitions. [2021-11-20 06:11:59,348 INFO L78 Accepts]: Start accepts. Automaton has 1573 states and 2282 transitions. Word has length 114 [2021-11-20 06:11:59,349 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:11:59,349 INFO L470 AbstractCegarLoop]: Abstraction has 1573 states and 2282 transitions. [2021-11-20 06:11:59,350 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 6 states, 5 states have (on average 10.8) internal successors, (54), 6 states have internal predecessors, (54), 3 states have call successors, (11), 2 states have call predecessors, (11), 4 states have return successors, (10), 3 states have call predecessors, (10), 3 states have call successors, (10) [2021-11-20 06:11:59,350 INFO L276 IsEmpty]: Start isEmpty. Operand 1573 states and 2282 transitions. [2021-11-20 06:11:59,354 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 117 [2021-11-20 06:11:59,354 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:11:59,355 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:11:59,376 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (3)] Ended with exit code 0 [2021-11-20 06:11:59,569 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 3 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:11:59,569 INFO L402 AbstractCegarLoop]: === Iteration 3 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:11:59,570 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:11:59,570 INFO L85 PathProgramCache]: Analyzing trace with hash -1593780675, now seen corresponding path program 1 times [2021-11-20 06:11:59,571 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:11:59,571 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2004676643] [2021-11-20 06:11:59,571 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:11:59,571 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:11:59,571 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:11:59,572 INFO L229 MonitoredProcess]: Starting monitored process 4 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:11:59,573 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Waiting until timeout for monitored process [2021-11-20 06:12:00,238 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:00,265 INFO L263 TraceCheckSpWp]: Trace formula consists of 907 conjuncts, 6 conjunts are in the unsatisfiable core [2021-11-20 06:12:00,270 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:01,139 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 12 proven. 1 refuted. 0 times theorem prover too weak. 85 trivial. 0 not checked. [2021-11-20 06:12:01,139 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:02,944 INFO L134 CoverageAnalysis]: Checked inductivity of 98 backedges. 0 proven. 11 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-20 06:12:02,944 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:02,944 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2004676643] [2021-11-20 06:12:02,945 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2004676643] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:12:02,945 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-20 06:12:02,945 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [7, 7] total 11 [2021-11-20 06:12:02,945 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1677906067] [2021-11-20 06:12:02,946 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-20 06:12:02,948 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 11 states [2021-11-20 06:12:02,948 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:02,949 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 11 interpolants. [2021-11-20 06:12:02,950 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=28, Invalid=82, Unknown=0, NotChecked=0, Total=110 [2021-11-20 06:12:02,952 INFO L87 Difference]: Start difference. First operand 1573 states and 2282 transitions. Second operand has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-20 06:12:04,622 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:04,623 INFO L93 Difference]: Finished difference Result 3140 states and 4559 transitions. [2021-11-20 06:12:04,625 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2021-11-20 06:12:04,625 INFO L78 Accepts]: Start accepts. Automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 116 [2021-11-20 06:12:04,626 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:04,644 INFO L225 Difference]: With dead ends: 3140 [2021-11-20 06:12:04,644 INFO L226 Difference]: Without dead ends: 1576 [2021-11-20 06:12:04,653 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 233 GetRequests, 221 SyntacticMatches, 0 SemanticMatches, 12 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 8 ImplicationChecksByTransitivity, 1.1s TimeCoverageRelationStatistics Valid=46, Invalid=136, Unknown=0, NotChecked=0, Total=182 [2021-11-20 06:12:04,655 INFO L933 BasicCegarLoop]: 2267 mSDtfsCounter, 11 mSDsluCounter, 13573 mSDsCounter, 0 mSdLazyCounter, 121 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 13 SdHoareTripleChecker+Valid, 15840 SdHoareTripleChecker+Invalid, 124 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 121 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:04,655 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [13 Valid, 15840 Invalid, 124 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 121 Invalid, 0 Unknown, 0 Unchecked, 1.2s Time] [2021-11-20 06:12:04,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1576 states. [2021-11-20 06:12:04,717 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1576 to 1574. [2021-11-20 06:12:04,721 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 1574 states, 1105 states have (on average 1.388235294117647) internal successors, (1534), 1161 states have internal predecessors, (1534), 375 states have call successors, (375), 93 states have call predecessors, (375), 93 states have return successors, (375), 345 states have call predecessors, (375), 371 states have call successors, (375) [2021-11-20 06:12:04,737 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 1574 states to 1574 states and 2284 transitions. [2021-11-20 06:12:04,738 INFO L78 Accepts]: Start accepts. Automaton has 1574 states and 2284 transitions. Word has length 116 [2021-11-20 06:12:04,738 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:04,739 INFO L470 AbstractCegarLoop]: Abstraction has 1574 states and 2284 transitions. [2021-11-20 06:12:04,739 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 11 states, 9 states have (on average 7.666666666666667) internal successors, (69), 11 states have internal predecessors, (69), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-20 06:12:04,739 INFO L276 IsEmpty]: Start isEmpty. Operand 1574 states and 2284 transitions. [2021-11-20 06:12:04,743 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 119 [2021-11-20 06:12:04,743 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:04,743 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:04,771 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (4)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:04,964 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 4 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:04,965 INFO L402 AbstractCegarLoop]: === Iteration 4 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:04,965 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:04,965 INFO L85 PathProgramCache]: Analyzing trace with hash 1401967625, now seen corresponding path program 2 times [2021-11-20 06:12:04,966 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:04,966 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1622039877] [2021-11-20 06:12:04,967 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 06:12:04,967 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:04,967 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:04,968 INFO L229 MonitoredProcess]: Starting monitored process 5 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:04,969 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Waiting until timeout for monitored process [2021-11-20 06:12:05,508 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-20 06:12:05,508 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 06:12:05,532 INFO L263 TraceCheckSpWp]: Trace formula consists of 727 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:12:05,536 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:07,306 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-11-20 06:12:07,306 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:08,004 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 107 trivial. 0 not checked. [2021-11-20 06:12:08,004 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:08,005 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1622039877] [2021-11-20 06:12:08,005 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1622039877] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:12:08,005 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:12:08,005 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-20 06:12:08,005 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1081044190] [2021-11-20 06:12:08,005 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:08,006 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:12:08,006 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:08,006 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:12:08,007 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:08,007 INFO L87 Difference]: Start difference. First operand 1574 states and 2284 transitions. Second operand has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:08,259 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:08,260 INFO L93 Difference]: Finished difference Result 4669 states and 6925 transitions. [2021-11-20 06:12:08,260 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:12:08,261 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 118 [2021-11-20 06:12:08,262 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:08,293 INFO L225 Difference]: With dead ends: 4669 [2021-11-20 06:12:08,294 INFO L226 Difference]: Without dead ends: 3118 [2021-11-20 06:12:08,306 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 234 GetRequests, 233 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:08,307 INFO L933 BasicCegarLoop]: 2892 mSDtfsCounter, 2205 mSDsluCounter, 2266 mSDsCounter, 0 mSdLazyCounter, 10 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2205 SdHoareTripleChecker+Valid, 5158 SdHoareTripleChecker+Invalid, 13 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 10 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:08,307 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2205 Valid, 5158 Invalid, 13 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 10 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:12:08,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3118 states. [2021-11-20 06:12:08,440 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3118 to 3112. [2021-11-20 06:12:08,448 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3112 states, 2188 states have (on average 1.3889396709323583) internal successors, (3039), 2296 states have internal predecessors, (3039), 739 states have call successors, (739), 184 states have call predecessors, (739), 184 states have return successors, (774), 683 states have call predecessors, (774), 735 states have call successors, (774) [2021-11-20 06:12:08,468 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3112 states to 3112 states and 4552 transitions. [2021-11-20 06:12:08,469 INFO L78 Accepts]: Start accepts. Automaton has 3112 states and 4552 transitions. Word has length 118 [2021-11-20 06:12:08,470 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:08,470 INFO L470 AbstractCegarLoop]: Abstraction has 3112 states and 4552 transitions. [2021-11-20 06:12:08,513 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 21.666666666666668) internal successors, (65), 3 states have internal predecessors, (65), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:08,513 INFO L276 IsEmpty]: Start isEmpty. Operand 3112 states and 4552 transitions. [2021-11-20 06:12:08,516 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 120 [2021-11-20 06:12:08,517 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:08,517 INFO L514 BasicCegarLoop]: trace histogram [4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:08,538 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (5)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:08,717 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 5 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:08,718 INFO L402 AbstractCegarLoop]: === Iteration 5 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:08,718 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:08,718 INFO L85 PathProgramCache]: Analyzing trace with hash 510774303, now seen corresponding path program 1 times [2021-11-20 06:12:08,719 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:08,720 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1251500862] [2021-11-20 06:12:08,720 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:08,720 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:08,720 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:08,721 INFO L229 MonitoredProcess]: Starting monitored process 6 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:08,724 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Waiting until timeout for monitored process [2021-11-20 06:12:09,364 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:09,392 INFO L263 TraceCheckSpWp]: Trace formula consists of 918 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-20 06:12:09,395 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:10,265 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 17 proven. 3 refuted. 0 times theorem prover too weak. 87 trivial. 0 not checked. [2021-11-20 06:12:10,265 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:12,402 INFO L134 CoverageAnalysis]: Checked inductivity of 107 backedges. 0 proven. 18 refuted. 0 times theorem prover too weak. 89 trivial. 0 not checked. [2021-11-20 06:12:12,402 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:12,402 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1251500862] [2021-11-20 06:12:12,402 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1251500862] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:12:12,402 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-20 06:12:12,403 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [8, 8] total 13 [2021-11-20 06:12:12,403 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1821735649] [2021-11-20 06:12:12,403 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-20 06:12:12,403 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 13 states [2021-11-20 06:12:12,403 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:12,404 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2021-11-20 06:12:12,404 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=36, Invalid=120, Unknown=0, NotChecked=0, Total=156 [2021-11-20 06:12:12,404 INFO L87 Difference]: Start difference. First operand 3112 states and 4552 transitions. Second operand has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-20 06:12:14,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:14,839 INFO L93 Difference]: Finished difference Result 6229 states and 9125 transitions. [2021-11-20 06:12:14,841 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2021-11-20 06:12:14,841 INFO L78 Accepts]: Start accepts. Automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 119 [2021-11-20 06:12:14,842 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:14,872 INFO L225 Difference]: With dead ends: 6229 [2021-11-20 06:12:14,872 INFO L226 Difference]: Without dead ends: 3126 [2021-11-20 06:12:14,891 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 225 SyntacticMatches, 0 SemanticMatches, 15 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 1.6s TimeCoverageRelationStatistics Valid=63, Invalid=209, Unknown=0, NotChecked=0, Total=272 [2021-11-20 06:12:14,892 INFO L933 BasicCegarLoop]: 2268 mSDtfsCounter, 17 mSDsluCounter, 15842 mSDsCounter, 0 mSdLazyCounter, 186 mSolverCounterSat, 6 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.7s Time, 0 mProtectedPredicate, 0 mProtectedAction, 19 SdHoareTripleChecker+Valid, 18110 SdHoareTripleChecker+Invalid, 192 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 6 IncrementalHoareTripleChecker+Valid, 186 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.9s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:14,893 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [19 Valid, 18110 Invalid, 192 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [6 Valid, 186 Invalid, 0 Unknown, 0 Unchecked, 1.9s Time] [2021-11-20 06:12:14,900 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 3126 states. [2021-11-20 06:12:15,015 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 3126 to 3113. [2021-11-20 06:12:15,024 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 3113 states, 2189 states have (on average 1.3892188213796255) internal successors, (3041), 2297 states have internal predecessors, (3041), 739 states have call successors, (739), 184 states have call predecessors, (739), 184 states have return successors, (774), 683 states have call predecessors, (774), 735 states have call successors, (774) [2021-11-20 06:12:15,042 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 3113 states to 3113 states and 4554 transitions. [2021-11-20 06:12:15,044 INFO L78 Accepts]: Start accepts. Automaton has 3113 states and 4554 transitions. Word has length 119 [2021-11-20 06:12:15,045 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:15,045 INFO L470 AbstractCegarLoop]: Abstraction has 3113 states and 4554 transitions. [2021-11-20 06:12:15,045 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 13 states, 11 states have (on average 6.545454545454546) internal successors, (72), 13 states have internal predecessors, (72), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-20 06:12:15,045 INFO L276 IsEmpty]: Start isEmpty. Operand 3113 states and 4554 transitions. [2021-11-20 06:12:15,054 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 122 [2021-11-20 06:12:15,054 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:15,056 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:15,077 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (6)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:15,270 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 6 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:15,271 INFO L402 AbstractCegarLoop]: === Iteration 6 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:15,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:15,271 INFO L85 PathProgramCache]: Analyzing trace with hash -639996693, now seen corresponding path program 2 times [2021-11-20 06:12:15,272 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:15,272 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [233695628] [2021-11-20 06:12:15,272 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 06:12:15,272 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:15,272 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:15,273 INFO L229 MonitoredProcess]: Starting monitored process 7 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:15,274 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Waiting until timeout for monitored process [2021-11-20 06:12:15,840 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-20 06:12:15,840 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 06:12:15,857 INFO L263 TraceCheckSpWp]: Trace formula consists of 728 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:12:15,860 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:17,602 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-11-20 06:12:17,602 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:18,307 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 120 trivial. 0 not checked. [2021-11-20 06:12:18,308 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:18,308 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [233695628] [2021-11-20 06:12:18,308 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [233695628] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:12:18,308 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:12:18,308 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-20 06:12:18,308 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [345810782] [2021-11-20 06:12:18,308 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:18,309 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:12:18,309 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:18,309 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:12:18,309 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:18,310 INFO L87 Difference]: Start difference. First operand 3113 states and 4554 transitions. Second operand has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:18,540 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:18,540 INFO L93 Difference]: Finished difference Result 8928 states and 13306 transitions. [2021-11-20 06:12:18,541 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:12:18,541 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 121 [2021-11-20 06:12:18,543 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:18,594 INFO L225 Difference]: With dead ends: 8928 [2021-11-20 06:12:18,594 INFO L226 Difference]: Without dead ends: 5838 [2021-11-20 06:12:18,618 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 240 GetRequests, 239 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:18,620 INFO L933 BasicCegarLoop]: 2602 mSDtfsCounter, 1949 mSDsluCounter, 2236 mSDsCounter, 0 mSdLazyCounter, 7 mSolverCounterSat, 2 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1949 SdHoareTripleChecker+Valid, 4838 SdHoareTripleChecker+Invalid, 9 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 2 IncrementalHoareTripleChecker+Valid, 7 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:18,621 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1949 Valid, 4838 Invalid, 9 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [2 Valid, 7 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:12:18,632 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5838 states. [2021-11-20 06:12:18,900 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5838 to 5826. [2021-11-20 06:12:18,923 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5826 states, 4098 states have (on average 1.395070766227428) internal successors, (5717), 4308 states have internal predecessors, (5717), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-11-20 06:12:19,045 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5826 states to 5826 states and 8539 transitions. [2021-11-20 06:12:19,047 INFO L78 Accepts]: Start accepts. Automaton has 5826 states and 8539 transitions. Word has length 121 [2021-11-20 06:12:19,048 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:19,048 INFO L470 AbstractCegarLoop]: Abstraction has 5826 states and 8539 transitions. [2021-11-20 06:12:19,050 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.0) internal successors, (66), 3 states have internal predecessors, (66), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:19,050 INFO L276 IsEmpty]: Start isEmpty. Operand 5826 states and 8539 transitions. [2021-11-20 06:12:19,053 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 123 [2021-11-20 06:12:19,053 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:19,054 INFO L514 BasicCegarLoop]: trace histogram [6, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:19,077 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (7)] Ended with exit code 0 [2021-11-20 06:12:19,269 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 7 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:19,269 INFO L402 AbstractCegarLoop]: === Iteration 7 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:19,269 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:19,269 INFO L85 PathProgramCache]: Analyzing trace with hash 1634394752, now seen corresponding path program 1 times [2021-11-20 06:12:19,270 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:19,271 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2037039353] [2021-11-20 06:12:19,271 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:19,271 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:19,271 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:19,272 INFO L229 MonitoredProcess]: Starting monitored process 8 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:19,312 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Waiting until timeout for monitored process [2021-11-20 06:12:19,943 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:19,971 INFO L263 TraceCheckSpWp]: Trace formula consists of 929 conjuncts, 8 conjunts are in the unsatisfiable core [2021-11-20 06:12:19,974 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:20,971 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 24 proven. 6 refuted. 0 times theorem prover too weak. 90 trivial. 0 not checked. [2021-11-20 06:12:20,972 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:23,525 INFO L134 CoverageAnalysis]: Checked inductivity of 120 backedges. 0 proven. 28 refuted. 0 times theorem prover too weak. 92 trivial. 0 not checked. [2021-11-20 06:12:23,526 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:23,526 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2037039353] [2021-11-20 06:12:23,526 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2037039353] provided 0 perfect and 2 imperfect interpolant sequences [2021-11-20 06:12:23,526 INFO L186 FreeRefinementEngine]: Found 0 perfect and 2 imperfect interpolant sequences. [2021-11-20 06:12:23,527 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [] imperfect sequences [9, 9] total 15 [2021-11-20 06:12:23,527 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1730201278] [2021-11-20 06:12:23,527 INFO L85 oduleStraightlineAll]: Using 2 imperfect interpolants to construct interpolant automaton [2021-11-20 06:12:23,528 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-20 06:12:23,528 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:23,528 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-20 06:12:23,528 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=45, Invalid=165, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:12:23,529 INFO L87 Difference]: Start difference. First operand 5826 states and 8539 transitions. Second operand has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-20 06:12:26,807 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:26,808 INFO L93 Difference]: Finished difference Result 11686 states and 17167 transitions. [2021-11-20 06:12:26,809 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2021-11-20 06:12:26,809 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) Word has length 122 [2021-11-20 06:12:26,810 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:26,857 INFO L225 Difference]: With dead ends: 11686 [2021-11-20 06:12:26,857 INFO L226 Difference]: Without dead ends: 5869 [2021-11-20 06:12:26,885 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 247 GetRequests, 229 SyntacticMatches, 0 SemanticMatches, 18 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 24 ImplicationChecksByTransitivity, 2.2s TimeCoverageRelationStatistics Valid=83, Invalid=297, Unknown=0, NotChecked=0, Total=380 [2021-11-20 06:12:26,885 INFO L933 BasicCegarLoop]: 2269 mSDtfsCounter, 26 mSDsluCounter, 20375 mSDsCounter, 0 mSdLazyCounter, 285 mSolverCounterSat, 10 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 2.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 28 SdHoareTripleChecker+Valid, 22644 SdHoareTripleChecker+Invalid, 295 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 10 IncrementalHoareTripleChecker+Valid, 285 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 2.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:26,886 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [28 Valid, 22644 Invalid, 295 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [10 Valid, 285 Invalid, 0 Unknown, 0 Unchecked, 2.5s Time] [2021-11-20 06:12:26,896 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5869 states. [2021-11-20 06:12:27,117 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5869 to 5827. [2021-11-20 06:12:27,126 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5827 states, 4099 states have (on average 1.3952183459380336) internal successors, (5719), 4309 states have internal predecessors, (5719), 1377 states have call successors, (1377), 350 states have call predecessors, (1377), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-11-20 06:12:27,151 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5827 states to 5827 states and 8541 transitions. [2021-11-20 06:12:27,154 INFO L78 Accepts]: Start accepts. Automaton has 5827 states and 8541 transitions. Word has length 122 [2021-11-20 06:12:27,155 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:27,155 INFO L470 AbstractCegarLoop]: Abstraction has 5827 states and 8541 transitions. [2021-11-20 06:12:27,155 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 5.769230769230769) internal successors, (75), 15 states have internal predecessors, (75), 4 states have call successors, (14), 2 states have call predecessors, (14), 5 states have return successors, (14), 4 states have call predecessors, (14), 4 states have call successors, (14) [2021-11-20 06:12:27,155 INFO L276 IsEmpty]: Start isEmpty. Operand 5827 states and 8541 transitions. [2021-11-20 06:12:27,159 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 125 [2021-11-20 06:12:27,160 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:27,160 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:27,184 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (8)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:27,384 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 8 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:27,384 INFO L402 AbstractCegarLoop]: === Iteration 8 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:27,385 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:27,385 INFO L85 PathProgramCache]: Analyzing trace with hash -1590994356, now seen corresponding path program 2 times [2021-11-20 06:12:27,386 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:27,386 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [229497029] [2021-11-20 06:12:27,386 INFO L93 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2021-11-20 06:12:27,386 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:27,386 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:27,387 INFO L229 MonitoredProcess]: Starting monitored process 9 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:27,388 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Waiting until timeout for monitored process [2021-11-20 06:12:27,919 INFO L228 tOrderPrioritization]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2021-11-20 06:12:27,919 INFO L229 tOrderPrioritization]: Conjunction of SSA is unsat [2021-11-20 06:12:27,935 INFO L263 TraceCheckSpWp]: Trace formula consists of 729 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:12:27,938 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:29,611 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-20 06:12:29,611 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:30,314 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-20 06:12:30,314 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:30,314 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [229497029] [2021-11-20 06:12:30,314 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [229497029] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:12:30,314 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:12:30,314 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-20 06:12:30,314 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1920861914] [2021-11-20 06:12:30,315 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:30,315 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:12:30,315 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:30,315 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:12:30,315 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:30,316 INFO L87 Difference]: Start difference. First operand 5827 states and 8541 transitions. Second operand has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:30,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:30,435 INFO L93 Difference]: Finished difference Result 5829 states and 8542 transitions. [2021-11-20 06:12:30,436 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:12:30,436 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 124 [2021-11-20 06:12:30,437 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:30,477 INFO L225 Difference]: With dead ends: 5829 [2021-11-20 06:12:30,478 INFO L226 Difference]: Without dead ends: 5826 [2021-11-20 06:12:30,482 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 246 GetRequests, 245 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:30,483 INFO L933 BasicCegarLoop]: 2272 mSDtfsCounter, 2206 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2206 SdHoareTripleChecker+Valid, 2272 SdHoareTripleChecker+Invalid, 1 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:30,484 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2206 Valid, 2272 Invalid, 1 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:12:30,494 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5826 states. [2021-11-20 06:12:30,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5826 to 5826. [2021-11-20 06:12:30,791 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5826 states, 4099 states have (on average 1.3949743839960966) internal successors, (5718), 4308 states have internal predecessors, (5718), 1376 states have call successors, (1376), 350 states have call predecessors, (1376), 350 states have return successors, (1445), 1269 states have call predecessors, (1445), 1373 states have call successors, (1445) [2021-11-20 06:12:30,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5826 states to 5826 states and 8539 transitions. [2021-11-20 06:12:30,818 INFO L78 Accepts]: Start accepts. Automaton has 5826 states and 8539 transitions. Word has length 124 [2021-11-20 06:12:30,818 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:30,819 INFO L470 AbstractCegarLoop]: Abstraction has 5826 states and 8539 transitions. [2021-11-20 06:12:30,820 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.333333333333332) internal successors, (67), 3 states have internal predecessors, (67), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:30,820 INFO L276 IsEmpty]: Start isEmpty. Operand 5826 states and 8539 transitions. [2021-11-20 06:12:30,824 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 126 [2021-11-20 06:12:30,824 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:30,824 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:30,849 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (9)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:31,042 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 9 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:31,042 INFO L402 AbstractCegarLoop]: === Iteration 9 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:31,043 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:31,043 INFO L85 PathProgramCache]: Analyzing trace with hash -2076724158, now seen corresponding path program 1 times [2021-11-20 06:12:31,043 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:31,044 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1012376865] [2021-11-20 06:12:31,044 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:31,044 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:31,044 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:31,045 INFO L229 MonitoredProcess]: Starting monitored process 10 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:31,046 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Waiting until timeout for monitored process [2021-11-20 06:12:31,742 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:31,771 INFO L263 TraceCheckSpWp]: Trace formula consists of 940 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:12:31,775 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:33,451 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-20 06:12:33,451 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:34,161 INFO L134 CoverageAnalysis]: Checked inductivity of 137 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 137 trivial. 0 not checked. [2021-11-20 06:12:34,162 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:34,162 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1012376865] [2021-11-20 06:12:34,162 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1012376865] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:12:34,162 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:12:34,162 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [2, 3] imperfect sequences [] total 3 [2021-11-20 06:12:34,163 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [934366005] [2021-11-20 06:12:34,163 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:34,163 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:12:34,164 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:34,164 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:12:34,164 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:34,164 INFO L87 Difference]: Start difference. First operand 5826 states and 8539 transitions. Second operand has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:34,334 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:34,334 INFO L93 Difference]: Finished difference Result 5828 states and 8540 transitions. [2021-11-20 06:12:34,334 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:12:34,335 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) Word has length 125 [2021-11-20 06:12:34,335 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:34,371 INFO L225 Difference]: With dead ends: 5828 [2021-11-20 06:12:34,371 INFO L226 Difference]: Without dead ends: 5796 [2021-11-20 06:12:34,375 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 248 GetRequests, 247 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:34,378 INFO L933 BasicCegarLoop]: 2271 mSDtfsCounter, 2203 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 0 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2203 SdHoareTripleChecker+Valid, 2271 SdHoareTripleChecker+Invalid, 0 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 0 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:34,378 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2203 Valid, 2271 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 0 Invalid, 0 Unknown, 0 Unchecked, 0.0s Time] [2021-11-20 06:12:34,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 5796 states. [2021-11-20 06:12:34,700 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 5796 to 5796. [2021-11-20 06:12:34,706 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5796 states, 4083 states have (on average 1.3955424932647562) internal successors, (5698), 4291 states have internal predecessors, (5698), 1363 states have call successors, (1363), 349 states have call predecessors, (1363), 349 states have return successors, (1433), 1257 states have call predecessors, (1433), 1361 states have call successors, (1433) [2021-11-20 06:12:34,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5796 states to 5796 states and 8494 transitions. [2021-11-20 06:12:34,730 INFO L78 Accepts]: Start accepts. Automaton has 5796 states and 8494 transitions. Word has length 125 [2021-11-20 06:12:34,731 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:34,731 INFO L470 AbstractCegarLoop]: Abstraction has 5796 states and 8494 transitions. [2021-11-20 06:12:34,731 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 22.666666666666668) internal successors, (68), 3 states have internal predecessors, (68), 3 states have call successors, (19), 3 states have call predecessors, (19), 2 states have return successors, (18), 2 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:34,731 INFO L276 IsEmpty]: Start isEmpty. Operand 5796 states and 8494 transitions. [2021-11-20 06:12:34,744 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 178 [2021-11-20 06:12:34,744 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:34,745 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:34,772 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (10)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:34,961 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 10 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:34,961 INFO L402 AbstractCegarLoop]: === Iteration 10 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:34,961 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:34,961 INFO L85 PathProgramCache]: Analyzing trace with hash -104625019, now seen corresponding path program 1 times [2021-11-20 06:12:34,962 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:34,962 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1431131791] [2021-11-20 06:12:34,962 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:34,962 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:34,962 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:34,963 INFO L229 MonitoredProcess]: Starting monitored process 11 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:34,965 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Waiting until timeout for monitored process [2021-11-20 06:12:35,772 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:35,812 INFO L263 TraceCheckSpWp]: Trace formula consists of 1159 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:12:35,816 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:36,572 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-11-20 06:12:36,572 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:37,217 INFO L134 CoverageAnalysis]: Checked inductivity of 154 backedges. 4 proven. 0 refuted. 0 times theorem prover too weak. 150 trivial. 0 not checked. [2021-11-20 06:12:37,217 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:37,217 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1431131791] [2021-11-20 06:12:37,217 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1431131791] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:12:37,217 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:12:37,217 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 3 [2021-11-20 06:12:37,217 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [622853900] [2021-11-20 06:12:37,218 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:37,218 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 3 states [2021-11-20 06:12:37,218 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:37,219 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-11-20 06:12:37,219 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:37,219 INFO L87 Difference]: Start difference. First operand 5796 states and 8494 transitions. Second operand has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-20 06:12:38,042 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:38,042 INFO L93 Difference]: Finished difference Result 16733 states and 24520 transitions. [2021-11-20 06:12:38,043 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:12:38,043 INFO L78 Accepts]: Start accepts. Automaton has has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) Word has length 177 [2021-11-20 06:12:38,043 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:38,139 INFO L225 Difference]: With dead ends: 16733 [2021-11-20 06:12:38,139 INFO L226 Difference]: Without dead ends: 10960 [2021-11-20 06:12:38,164 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 352 GetRequests, 351 SyntacticMatches, 0 SemanticMatches, 1 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.0s TimeCoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-11-20 06:12:38,165 INFO L933 BasicCegarLoop]: 2693 mSDtfsCounter, 1929 mSDsluCounter, 2184 mSDsCounter, 0 mSdLazyCounter, 21 mSolverCounterSat, 3 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1929 SdHoareTripleChecker+Valid, 4877 SdHoareTripleChecker+Invalid, 24 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 3 IncrementalHoareTripleChecker+Valid, 21 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:38,166 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1929 Valid, 4877 Invalid, 24 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [3 Valid, 21 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-20 06:12:38,184 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10960 states. [2021-11-20 06:12:38,919 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10960 to 10936. [2021-11-20 06:12:38,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10936 states, 7699 states have (on average 1.3983634238212754) internal successors, (10766), 8111 states have internal predecessors, (10766), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 677 states have return successors, (2695), 2349 states have call predecessors, (2695), 2557 states have call successors, (2695) [2021-11-20 06:12:38,982 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10936 states to 10936 states and 16020 transitions. [2021-11-20 06:12:38,987 INFO L78 Accepts]: Start accepts. Automaton has 10936 states and 16020 transitions. Word has length 177 [2021-11-20 06:12:38,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:38,988 INFO L470 AbstractCegarLoop]: Abstraction has 10936 states and 16020 transitions. [2021-11-20 06:12:38,988 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 3 states, 3 states have (on average 31.333333333333332) internal successors, (94), 3 states have internal predecessors, (94), 2 states have call successors, (24), 2 states have call predecessors, (24), 2 states have return successors, (23), 2 states have call predecessors, (23), 2 states have call successors, (23) [2021-11-20 06:12:38,988 INFO L276 IsEmpty]: Start isEmpty. Operand 10936 states and 16020 transitions. [2021-11-20 06:12:39,015 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 217 [2021-11-20 06:12:39,015 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:39,015 INFO L514 BasicCegarLoop]: trace histogram [8, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:39,040 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (11)] Ended with exit code 0 [2021-11-20 06:12:39,237 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 11 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:39,237 INFO L402 AbstractCegarLoop]: === Iteration 11 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:39,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:39,238 INFO L85 PathProgramCache]: Analyzing trace with hash 1302458743, now seen corresponding path program 1 times [2021-11-20 06:12:39,239 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:39,239 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1510170466] [2021-11-20 06:12:39,239 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:39,239 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:39,239 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:39,240 INFO L229 MonitoredProcess]: Starting monitored process 12 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:39,242 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Waiting until timeout for monitored process [2021-11-20 06:12:40,151 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:40,198 INFO L263 TraceCheckSpWp]: Trace formula consists of 1298 conjuncts, 3 conjunts are in the unsatisfiable core [2021-11-20 06:12:40,203 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:41,039 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 211 trivial. 0 not checked. [2021-11-20 06:12:41,039 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:41,732 INFO L134 CoverageAnalysis]: Checked inductivity of 231 backedges. 20 proven. 0 refuted. 0 times theorem prover too weak. 211 trivial. 0 not checked. [2021-11-20 06:12:41,733 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:41,733 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1510170466] [2021-11-20 06:12:41,733 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1510170466] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:12:41,733 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:12:41,733 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4, 4] imperfect sequences [] total 4 [2021-11-20 06:12:41,734 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [113963564] [2021-11-20 06:12:41,734 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:41,735 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:12:41,735 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:41,735 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:12:41,735 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:12:41,736 INFO L87 Difference]: Start difference. First operand 10936 states and 16020 transitions. Second operand has 4 states, 4 states have (on average 28.75) internal successors, (115), 4 states have internal predecessors, (115), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-20 06:12:43,595 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:43,595 INFO L93 Difference]: Finished difference Result 24204 states and 35880 transitions. [2021-11-20 06:12:43,596 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:12:43,596 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 28.75) internal successors, (115), 4 states have internal predecessors, (115), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) Word has length 216 [2021-11-20 06:12:43,596 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:43,666 INFO L225 Difference]: With dead ends: 24204 [2021-11-20 06:12:43,666 INFO L226 Difference]: Without dead ends: 13291 [2021-11-20 06:12:43,699 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 432 GetRequests, 429 SyntacticMatches, 0 SemanticMatches, 3 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=9, Invalid=11, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:12:43,700 INFO L933 BasicCegarLoop]: 2600 mSDtfsCounter, 3048 mSDsluCounter, 2332 mSDsCounter, 0 mSdLazyCounter, 125 mSolverCounterSat, 180 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3048 SdHoareTripleChecker+Valid, 4932 SdHoareTripleChecker+Invalid, 305 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 180 IncrementalHoareTripleChecker+Valid, 125 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.3s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:43,700 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3048 Valid, 4932 Invalid, 305 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [180 Valid, 125 Invalid, 0 Unknown, 0 Unchecked, 1.3s Time] [2021-11-20 06:12:43,714 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13291 states. [2021-11-20 06:12:44,360 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13291 to 10950. [2021-11-20 06:12:44,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10950 states, 7713 states have (on average 1.3976403474653183) internal successors, (10780), 8125 states have internal predecessors, (10780), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 677 states have return successors, (2695), 2349 states have call predecessors, (2695), 2557 states have call successors, (2695) [2021-11-20 06:12:44,426 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10950 states to 10950 states and 16034 transitions. [2021-11-20 06:12:44,434 INFO L78 Accepts]: Start accepts. Automaton has 10950 states and 16034 transitions. Word has length 216 [2021-11-20 06:12:44,435 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:44,435 INFO L470 AbstractCegarLoop]: Abstraction has 10950 states and 16034 transitions. [2021-11-20 06:12:44,435 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 28.75) internal successors, (115), 4 states have internal predecessors, (115), 2 states have call successors, (25), 2 states have call predecessors, (25), 2 states have return successors, (24), 2 states have call predecessors, (24), 2 states have call successors, (24) [2021-11-20 06:12:44,436 INFO L276 IsEmpty]: Start isEmpty. Operand 10950 states and 16034 transitions. [2021-11-20 06:12:44,465 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 234 [2021-11-20 06:12:44,465 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:44,465 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:44,498 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (12)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:44,689 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 12 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:44,689 INFO L402 AbstractCegarLoop]: === Iteration 12 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:44,689 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:44,690 INFO L85 PathProgramCache]: Analyzing trace with hash 1556541598, now seen corresponding path program 1 times [2021-11-20 06:12:44,691 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:44,691 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [127954730] [2021-11-20 06:12:44,691 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:44,692 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:44,692 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:44,693 INFO L229 MonitoredProcess]: Starting monitored process 13 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:44,733 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Waiting until timeout for monitored process [2021-11-20 06:12:45,946 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:45,996 INFO L263 TraceCheckSpWp]: Trace formula consists of 1345 conjuncts, 7 conjunts are in the unsatisfiable core [2021-11-20 06:12:46,000 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:46,965 INFO L134 CoverageAnalysis]: Checked inductivity of 301 backedges. 25 proven. 0 refuted. 0 times theorem prover too weak. 276 trivial. 0 not checked. [2021-11-20 06:12:46,965 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:48,104 INFO L134 CoverageAnalysis]: Checked inductivity of 301 backedges. 21 proven. 2 refuted. 0 times theorem prover too weak. 278 trivial. 0 not checked. [2021-11-20 06:12:48,104 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:48,104 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [127954730] [2021-11-20 06:12:48,104 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [127954730] provided 1 perfect and 1 imperfect interpolant sequences [2021-11-20 06:12:48,105 INFO L186 FreeRefinementEngine]: Found 1 perfect and 1 imperfect interpolant sequences. [2021-11-20 06:12:48,105 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [5] total 8 [2021-11-20 06:12:48,105 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1445232326] [2021-11-20 06:12:48,105 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:48,106 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:12:48,106 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:48,106 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:12:48,107 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:12:48,107 INFO L87 Difference]: Start difference. First operand 10950 states and 16034 transitions. Second operand has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:48,974 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:48,974 INFO L93 Difference]: Finished difference Result 16645 states and 24385 transitions. [2021-11-20 06:12:48,975 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:12:48,975 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) Word has length 233 [2021-11-20 06:12:48,975 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:49,026 INFO L225 Difference]: With dead ends: 16645 [2021-11-20 06:12:49,026 INFO L226 Difference]: Without dead ends: 10986 [2021-11-20 06:12:49,046 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 465 GetRequests, 458 SyntacticMatches, 0 SemanticMatches, 7 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 3 ImplicationChecksByTransitivity, 0.5s TimeCoverageRelationStatistics Valid=22, Invalid=50, Unknown=0, NotChecked=0, Total=72 [2021-11-20 06:12:49,046 INFO L933 BasicCegarLoop]: 2271 mSDtfsCounter, 1 mSDsluCounter, 6803 mSDsCounter, 0 mSdLazyCounter, 17 mSolverCounterSat, 0 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.4s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2 SdHoareTripleChecker+Valid, 9074 SdHoareTripleChecker+Invalid, 17 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Valid, 17 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:49,047 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2 Valid, 9074 Invalid, 17 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [0 Valid, 17 Invalid, 0 Unknown, 0 Unchecked, 0.4s Time] [2021-11-20 06:12:49,063 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 10986 states. [2021-11-20 06:12:49,590 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 10986 to 10966. [2021-11-20 06:12:49,606 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10966 states, 7725 states have (on average 1.3970226537216828) internal successors, (10792), 8137 states have internal predecessors, (10792), 2559 states have call successors, (2559), 677 states have call predecessors, (2559), 681 states have return successors, (2713), 2353 states have call predecessors, (2713), 2557 states have call successors, (2713) [2021-11-20 06:12:49,661 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10966 states to 10966 states and 16064 transitions. [2021-11-20 06:12:49,664 INFO L78 Accepts]: Start accepts. Automaton has 10966 states and 16064 transitions. Word has length 233 [2021-11-20 06:12:49,664 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:49,665 INFO L470 AbstractCegarLoop]: Abstraction has 10966 states and 16064 transitions. [2021-11-20 06:12:49,665 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 21.8) internal successors, (109), 4 states have internal predecessors, (109), 2 states have call successors, (19), 2 states have call predecessors, (19), 3 states have return successors, (18), 3 states have call predecessors, (18), 2 states have call successors, (18) [2021-11-20 06:12:49,665 INFO L276 IsEmpty]: Start isEmpty. Operand 10966 states and 16064 transitions. [2021-11-20 06:12:49,693 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 240 [2021-11-20 06:12:49,693 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:49,694 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:49,729 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (13)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:49,917 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 13 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:49,917 INFO L402 AbstractCegarLoop]: === Iteration 13 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:49,917 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:49,917 INFO L85 PathProgramCache]: Analyzing trace with hash -2024074724, now seen corresponding path program 1 times [2021-11-20 06:12:49,918 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:49,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1728856826] [2021-11-20 06:12:49,919 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:49,919 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:49,919 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:49,920 INFO L229 MonitoredProcess]: Starting monitored process 14 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:49,921 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Waiting until timeout for monitored process [2021-11-20 06:12:50,949 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:51,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 1360 conjuncts, 17 conjunts are in the unsatisfiable core [2021-11-20 06:12:51,009 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:12:52,523 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-11-20 06:12:52,523 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:12:55,443 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 23 proven. 0 refuted. 0 times theorem prover too weak. 302 trivial. 0 not checked. [2021-11-20 06:12:55,444 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:12:55,444 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1728856826] [2021-11-20 06:12:55,444 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1728856826] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:12:55,444 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:12:55,444 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9, 9] imperfect sequences [] total 15 [2021-11-20 06:12:55,444 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [183999488] [2021-11-20 06:12:55,444 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:12:55,445 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 15 states [2021-11-20 06:12:55,445 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:12:55,446 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2021-11-20 06:12:55,446 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=34, Invalid=176, Unknown=0, NotChecked=0, Total=210 [2021-11-20 06:12:55,446 INFO L87 Difference]: Start difference. First operand 10966 states and 16064 transitions. Second operand has 15 states, 13 states have (on average 8.923076923076923) internal successors, (116), 11 states have internal predecessors, (116), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) [2021-11-20 06:12:57,577 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:12:57,577 INFO L93 Difference]: Finished difference Result 15259 states and 22543 transitions. [2021-11-20 06:12:57,577 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2021-11-20 06:12:57,577 INFO L78 Accepts]: Start accepts. Automaton has has 15 states, 13 states have (on average 8.923076923076923) internal successors, (116), 11 states have internal predecessors, (116), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) Word has length 239 [2021-11-20 06:12:57,578 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:12:57,638 INFO L225 Difference]: With dead ends: 15259 [2021-11-20 06:12:57,638 INFO L226 Difference]: Without dead ends: 12423 [2021-11-20 06:12:57,649 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 477 GetRequests, 463 SyntacticMatches, 0 SemanticMatches, 14 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 15 ImplicationChecksByTransitivity, 1.9s TimeCoverageRelationStatistics Valid=39, Invalid=201, Unknown=0, NotChecked=0, Total=240 [2021-11-20 06:12:57,650 INFO L933 BasicCegarLoop]: 2956 mSDtfsCounter, 994 mSDsluCounter, 28957 mSDsCounter, 0 mSdLazyCounter, 131 mSolverCounterSat, 123 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.3s Time, 0 mProtectedPredicate, 0 mProtectedAction, 1117 SdHoareTripleChecker+Valid, 31913 SdHoareTripleChecker+Invalid, 254 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 123 IncrementalHoareTripleChecker+Valid, 131 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:12:57,651 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [1117 Valid, 31913 Invalid, 254 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [123 Valid, 131 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2021-11-20 06:12:57,663 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 12423 states. [2021-11-20 06:12:58,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 12423 to 10984. [2021-11-20 06:12:58,223 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 10984 states, 7735 states have (on average 1.3965093729799611) internal successors, (10802), 8151 states have internal predecessors, (10802), 2561 states have call successors, (2561), 677 states have call predecessors, (2561), 687 states have return successors, (2727), 2357 states have call predecessors, (2727), 2559 states have call successors, (2727) [2021-11-20 06:12:58,274 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10984 states to 10984 states and 16090 transitions. [2021-11-20 06:12:58,277 INFO L78 Accepts]: Start accepts. Automaton has 10984 states and 16090 transitions. Word has length 239 [2021-11-20 06:12:58,277 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:12:58,277 INFO L470 AbstractCegarLoop]: Abstraction has 10984 states and 16090 transitions. [2021-11-20 06:12:58,278 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 15 states, 13 states have (on average 8.923076923076923) internal successors, (116), 11 states have internal predecessors, (116), 4 states have call successors, (21), 2 states have call predecessors, (21), 6 states have return successors, (22), 6 states have call predecessors, (22), 3 states have call successors, (22) [2021-11-20 06:12:58,278 INFO L276 IsEmpty]: Start isEmpty. Operand 10984 states and 16090 transitions. [2021-11-20 06:12:58,302 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2021-11-20 06:12:58,302 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:12:58,303 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:12:58,333 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (14)] Forceful destruction successful, exit code 0 [2021-11-20 06:12:58,525 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 14 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:12:58,525 INFO L402 AbstractCegarLoop]: === Iteration 14 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:12:58,525 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:12:58,525 INFO L85 PathProgramCache]: Analyzing trace with hash 1952403498, now seen corresponding path program 1 times [2021-11-20 06:12:58,527 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:12:58,527 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [373448768] [2021-11-20 06:12:58,527 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:12:58,527 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:12:58,527 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:12:58,529 INFO L229 MonitoredProcess]: Starting monitored process 15 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:12:58,549 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Waiting until timeout for monitored process [2021-11-20 06:12:59,484 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:12:59,539 INFO L263 TraceCheckSpWp]: Trace formula consists of 1360 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 06:12:59,544 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:13:00,342 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2021-11-20 06:13:00,342 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:13:01,144 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2021-11-20 06:13:01,145 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:13:01,145 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [373448768] [2021-11-20 06:13:01,145 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [373448768] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:13:01,145 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:13:01,145 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 8 [2021-11-20 06:13:01,146 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1884165442] [2021-11-20 06:13:01,146 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:13:01,146 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 8 states [2021-11-20 06:13:01,147 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:13:01,147 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2021-11-20 06:13:01,147 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=40, Unknown=0, NotChecked=0, Total=56 [2021-11-20 06:13:01,147 INFO L87 Difference]: Start difference. First operand 10984 states and 16090 transitions. Second operand has 8 states, 8 states have (on average 14.125) internal successors, (113), 8 states have internal predecessors, (113), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-20 06:13:18,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:13:18,947 INFO L93 Difference]: Finished difference Result 31506 states and 46739 transitions. [2021-11-20 06:13:18,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2021-11-20 06:13:18,948 INFO L78 Accepts]: Start accepts. Automaton has has 8 states, 8 states have (on average 14.125) internal successors, (113), 8 states have internal predecessors, (113), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) Word has length 240 [2021-11-20 06:13:18,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:13:19,061 INFO L225 Difference]: With dead ends: 31506 [2021-11-20 06:13:19,061 INFO L226 Difference]: Without dead ends: 25825 [2021-11-20 06:13:19,087 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 493 GetRequests, 477 SyntacticMatches, 0 SemanticMatches, 16 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 43 ImplicationChecksByTransitivity, 1.0s TimeCoverageRelationStatistics Valid=98, Invalid=208, Unknown=0, NotChecked=0, Total=306 [2021-11-20 06:13:19,088 INFO L933 BasicCegarLoop]: 4772 mSDtfsCounter, 7108 mSDsluCounter, 21390 mSDsCounter, 0 mSdLazyCounter, 1821 mSolverCounterSat, 793 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 15.0s Time, 0 mProtectedPredicate, 0 mProtectedAction, 7227 SdHoareTripleChecker+Valid, 26162 SdHoareTripleChecker+Invalid, 2614 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.1s SdHoareTripleChecker+Time, 793 IncrementalHoareTripleChecker+Valid, 1821 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 16.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:13:19,089 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [7227 Valid, 26162 Invalid, 2614 Unknown, 0 Unchecked, 0.1s Time], IncrementalHoareTripleChecker [793 Valid, 1821 Invalid, 0 Unknown, 0 Unchecked, 16.0s Time] [2021-11-20 06:13:19,115 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 25825 states. [2021-11-20 06:13:20,188 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 25825 to 11006. [2021-11-20 06:13:20,205 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11006 states, 7749 states have (on average 1.395793005549103) internal successors, (10816), 8165 states have internal predecessors, (10816), 2569 states have call successors, (2569), 677 states have call predecessors, (2569), 687 states have return successors, (2735), 2365 states have call predecessors, (2735), 2567 states have call successors, (2735) [2021-11-20 06:13:20,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11006 states to 11006 states and 16120 transitions. [2021-11-20 06:13:20,274 INFO L78 Accepts]: Start accepts. Automaton has 11006 states and 16120 transitions. Word has length 240 [2021-11-20 06:13:20,274 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:13:20,275 INFO L470 AbstractCegarLoop]: Abstraction has 11006 states and 16120 transitions. [2021-11-20 06:13:20,275 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 8 states, 8 states have (on average 14.125) internal successors, (113), 8 states have internal predecessors, (113), 2 states have call successors, (20), 2 states have call predecessors, (20), 1 states have return successors, (19), 1 states have call predecessors, (19), 1 states have call successors, (19) [2021-11-20 06:13:20,275 INFO L276 IsEmpty]: Start isEmpty. Operand 11006 states and 16120 transitions. [2021-11-20 06:13:20,299 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 241 [2021-11-20 06:13:20,299 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:13:20,300 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:13:20,331 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (15)] Forceful destruction successful, exit code 0 [2021-11-20 06:13:20,521 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 15 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:13:20,521 INFO L402 AbstractCegarLoop]: === Iteration 15 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:13:20,521 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:13:20,521 INFO L85 PathProgramCache]: Analyzing trace with hash 1818389992, now seen corresponding path program 1 times [2021-11-20 06:13:20,523 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:13:20,523 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [739290669] [2021-11-20 06:13:20,523 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:13:20,523 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:13:20,524 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:13:20,525 INFO L229 MonitoredProcess]: Starting monitored process 16 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:13:20,529 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (16)] Waiting until timeout for monitored process [2021-11-20 06:13:21,574 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:13:21,632 INFO L263 TraceCheckSpWp]: Trace formula consists of 1358 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:13:21,639 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:13:23,191 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 111 proven. 0 refuted. 0 times theorem prover too weak. 214 trivial. 0 not checked. [2021-11-20 06:13:23,191 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:13:24,253 INFO L134 CoverageAnalysis]: Checked inductivity of 325 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 304 trivial. 0 not checked. [2021-11-20 06:13:24,253 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:13:24,253 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [739290669] [2021-11-20 06:13:24,253 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [739290669] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:13:24,254 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:13:24,254 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:13:24,254 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1680476178] [2021-11-20 06:13:24,254 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:13:24,255 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:13:24,255 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:13:24,255 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:13:24,256 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:13:24,256 INFO L87 Difference]: Start difference. First operand 11006 states and 16120 transitions. Second operand has 4 states, 4 states have (on average 42.0) internal successors, (168), 4 states have internal predecessors, (168), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) [2021-11-20 06:13:31,526 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:13:31,526 INFO L93 Difference]: Finished difference Result 42908 states and 62923 transitions. [2021-11-20 06:13:31,527 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2021-11-20 06:13:31,527 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 42.0) internal successors, (168), 4 states have internal predecessors, (168), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) Word has length 240 [2021-11-20 06:13:31,528 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:13:31,774 INFO L225 Difference]: With dead ends: 42908 [2021-11-20 06:13:31,774 INFO L226 Difference]: Without dead ends: 31925 [2021-11-20 06:13:31,799 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 478 GetRequests, 476 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:13:31,800 INFO L933 BasicCegarLoop]: 5679 mSDtfsCounter, 4233 mSDsluCounter, 5596 mSDsCounter, 0 mSdLazyCounter, 713 mSolverCounterSat, 20 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 5.6s Time, 0 mProtectedPredicate, 0 mProtectedAction, 4233 SdHoareTripleChecker+Valid, 11275 SdHoareTripleChecker+Invalid, 733 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 20 IncrementalHoareTripleChecker+Valid, 713 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 6.0s IncrementalHoareTripleChecker+Time [2021-11-20 06:13:31,800 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [4233 Valid, 11275 Invalid, 733 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [20 Valid, 713 Invalid, 0 Unknown, 0 Unchecked, 6.0s Time] [2021-11-20 06:13:31,825 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 31925 states. [2021-11-20 06:13:33,338 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 31925 to 31913. [2021-11-20 06:13:33,535 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 31913 states, 22535 states have (on average 1.3984468604393165) internal successors, (31514), 23727 states have internal predecessors, (31514), 7387 states have call successors, (7387), 1960 states have call predecessors, (7387), 1990 states have return successors, (7881), 6779 states have call predecessors, (7881), 7385 states have call successors, (7881) [2021-11-20 06:13:33,742 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 31913 states to 31913 states and 46782 transitions. [2021-11-20 06:13:33,753 INFO L78 Accepts]: Start accepts. Automaton has 31913 states and 46782 transitions. Word has length 240 [2021-11-20 06:13:33,756 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:13:33,756 INFO L470 AbstractCegarLoop]: Abstraction has 31913 states and 46782 transitions. [2021-11-20 06:13:33,756 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 42.0) internal successors, (168), 4 states have internal predecessors, (168), 4 states have call successors, (31), 3 states have call predecessors, (31), 2 states have return successors, (30), 3 states have call predecessors, (30), 3 states have call successors, (30) [2021-11-20 06:13:33,756 INFO L276 IsEmpty]: Start isEmpty. Operand 31913 states and 46782 transitions. [2021-11-20 06:13:34,014 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 267 [2021-11-20 06:13:34,014 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:13:34,015 INFO L514 BasicCegarLoop]: trace histogram [8, 6, 6, 6, 5, 5, 5, 5, 5, 5, 5, 5, 5, 5, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:13:34,061 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (16)] Forceful destruction successful, exit code 0 [2021-11-20 06:13:34,229 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 16 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:13:34,229 INFO L402 AbstractCegarLoop]: === Iteration 16 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:13:34,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:13:34,230 INFO L85 PathProgramCache]: Analyzing trace with hash -771994492, now seen corresponding path program 1 times [2021-11-20 06:13:34,231 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:13:34,231 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1992595866] [2021-11-20 06:13:34,231 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:13:34,231 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:13:34,232 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:13:34,233 INFO L229 MonitoredProcess]: Starting monitored process 17 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:13:34,249 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (17)] Waiting until timeout for monitored process [2021-11-20 06:13:35,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:13:35,322 INFO L263 TraceCheckSpWp]: Trace formula consists of 1446 conjuncts, 4 conjunts are in the unsatisfiable core [2021-11-20 06:13:35,327 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:13:36,525 INFO L134 CoverageAnalysis]: Checked inductivity of 282 backedges. 42 proven. 0 refuted. 0 times theorem prover too weak. 240 trivial. 0 not checked. [2021-11-20 06:13:36,525 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:13:37,431 INFO L134 CoverageAnalysis]: Checked inductivity of 282 backedges. 22 proven. 0 refuted. 0 times theorem prover too weak. 260 trivial. 0 not checked. [2021-11-20 06:13:37,431 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:13:37,431 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1992595866] [2021-11-20 06:13:37,432 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1992595866] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:13:37,432 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:13:37,432 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5, 5] imperfect sequences [] total 5 [2021-11-20 06:13:37,432 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107969733] [2021-11-20 06:13:37,432 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:13:37,433 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 5 states [2021-11-20 06:13:37,433 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:13:37,434 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-11-20 06:13:37,434 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-11-20 06:13:37,434 INFO L87 Difference]: Start difference. First operand 31913 states and 46782 transitions. Second operand has 5 states, 5 states have (on average 27.6) internal successors, (138), 5 states have internal predecessors, (138), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) [2021-11-20 06:13:38,487 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:13:38,487 INFO L93 Difference]: Finished difference Result 47850 states and 70064 transitions. [2021-11-20 06:13:38,487 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2021-11-20 06:13:38,488 INFO L78 Accepts]: Start accepts. Automaton has has 5 states, 5 states have (on average 27.6) internal successors, (138), 5 states have internal predecessors, (138), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) Word has length 266 [2021-11-20 06:13:38,488 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:13:38,562 INFO L225 Difference]: With dead ends: 47850 [2021-11-20 06:13:38,562 INFO L226 Difference]: Without dead ends: 15781 [2021-11-20 06:13:38,763 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 532 GetRequests, 527 SyntacticMatches, 0 SemanticMatches, 5 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.2s TimeCoverageRelationStatistics Valid=17, Invalid=25, Unknown=0, NotChecked=0, Total=42 [2021-11-20 06:13:38,764 INFO L933 BasicCegarLoop]: 2265 mSDtfsCounter, 15 mSDsluCounter, 6772 mSDsCounter, 0 mSdLazyCounter, 15 mSolverCounterSat, 5 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 15 SdHoareTripleChecker+Valid, 9037 SdHoareTripleChecker+Invalid, 20 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 5 IncrementalHoareTripleChecker+Valid, 15 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.2s IncrementalHoareTripleChecker+Time [2021-11-20 06:13:38,764 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [15 Valid, 9037 Invalid, 20 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [5 Valid, 15 Invalid, 0 Unknown, 0 Unchecked, 0.2s Time] [2021-11-20 06:13:38,779 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15781 states. [2021-11-20 06:13:39,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15781 to 15771. [2021-11-20 06:13:39,597 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15771 states, 11113 states have (on average 1.3958427067398542) internal successors, (15512), 11711 states have internal predecessors, (15512), 3657 states have call successors, (3657), 988 states have call predecessors, (3657), 1000 states have return successors, (3891), 3347 states have call predecessors, (3891), 3655 states have call successors, (3891) [2021-11-20 06:13:39,689 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15771 states to 15771 states and 23060 transitions. [2021-11-20 06:13:39,698 INFO L78 Accepts]: Start accepts. Automaton has 15771 states and 23060 transitions. Word has length 266 [2021-11-20 06:13:39,699 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:13:39,699 INFO L470 AbstractCegarLoop]: Abstraction has 15771 states and 23060 transitions. [2021-11-20 06:13:39,699 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 5 states, 5 states have (on average 27.6) internal successors, (138), 5 states have internal predecessors, (138), 3 states have call successors, (33), 2 states have call predecessors, (33), 2 states have return successors, (32), 3 states have call predecessors, (32), 3 states have call successors, (32) [2021-11-20 06:13:39,699 INFO L276 IsEmpty]: Start isEmpty. Operand 15771 states and 23060 transitions. [2021-11-20 06:13:39,842 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 290 [2021-11-20 06:13:39,843 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:13:39,843 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:13:39,877 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (17)] Forceful destruction successful, exit code 0 [2021-11-20 06:13:40,069 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 17 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:13:40,070 INFO L402 AbstractCegarLoop]: === Iteration 17 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:13:40,070 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:13:40,070 INFO L85 PathProgramCache]: Analyzing trace with hash 49200001, now seen corresponding path program 1 times [2021-11-20 06:13:40,072 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:13:40,072 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1372011063] [2021-11-20 06:13:40,072 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:13:40,072 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:13:40,073 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:13:40,073 INFO L229 MonitoredProcess]: Starting monitored process 18 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:13:40,113 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (18)] Waiting until timeout for monitored process [2021-11-20 06:13:41,176 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:13:41,245 INFO L263 TraceCheckSpWp]: Trace formula consists of 1578 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:13:41,253 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:13:42,895 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-20 06:13:42,896 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:13:44,085 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-20 06:13:44,086 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:13:44,086 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1372011063] [2021-11-20 06:13:44,086 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1372011063] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:13:44,086 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:13:44,086 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:13:44,087 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1370916653] [2021-11-20 06:13:44,087 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:13:44,088 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:13:44,088 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:13:44,088 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:13:44,088 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:13:44,089 INFO L87 Difference]: Start difference. First operand 15771 states and 23060 transitions. Second operand has 4 states, 4 states have (on average 67.75) internal successors, (271), 4 states have internal predecessors, (271), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:13:44,948 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:13:44,948 INFO L93 Difference]: Finished difference Result 31485 states and 46039 transitions. [2021-11-20 06:13:44,948 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:13:44,949 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 67.75) internal successors, (271), 4 states have internal predecessors, (271), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 289 [2021-11-20 06:13:44,949 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:13:45,013 INFO L225 Difference]: With dead ends: 31485 [2021-11-20 06:13:45,014 INFO L226 Difference]: Without dead ends: 15747 [2021-11-20 06:13:45,064 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 576 GetRequests, 574 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:13:45,065 INFO L933 BasicCegarLoop]: 2264 mSDtfsCounter, 2254 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2254 SdHoareTripleChecker+Valid, 2264 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:13:45,065 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2254 Valid, 2264 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:13:45,079 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15747 states. [2021-11-20 06:13:46,072 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15747 to 15747. [2021-11-20 06:13:46,081 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15747 states, 11101 states have (on average 1.3951896225565263) internal successors, (15488), 11699 states have internal predecessors, (15488), 3645 states have call successors, (3645), 988 states have call predecessors, (3645), 1000 states have return successors, (3873), 3335 states have call predecessors, (3873), 3643 states have call successors, (3873) [2021-11-20 06:13:46,130 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15747 states to 15747 states and 23006 transitions. [2021-11-20 06:13:46,137 INFO L78 Accepts]: Start accepts. Automaton has 15747 states and 23006 transitions. Word has length 289 [2021-11-20 06:13:46,137 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:13:46,137 INFO L470 AbstractCegarLoop]: Abstraction has 15747 states and 23006 transitions. [2021-11-20 06:13:46,138 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 67.75) internal successors, (271), 4 states have internal predecessors, (271), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:13:46,138 INFO L276 IsEmpty]: Start isEmpty. Operand 15747 states and 23006 transitions. [2021-11-20 06:13:46,187 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 291 [2021-11-20 06:13:46,187 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:13:46,188 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:13:46,221 INFO L552 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (18)] Ended with exit code 0 [2021-11-20 06:13:46,413 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 18 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:13:46,413 INFO L402 AbstractCegarLoop]: === Iteration 18 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:13:46,413 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:13:46,414 INFO L85 PathProgramCache]: Analyzing trace with hash -1034291622, now seen corresponding path program 1 times [2021-11-20 06:13:46,415 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:13:46,416 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [1703337631] [2021-11-20 06:13:46,416 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:13:46,416 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:13:46,416 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:13:46,417 INFO L229 MonitoredProcess]: Starting monitored process 19 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:13:46,460 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (19)] Waiting until timeout for monitored process [2021-11-20 06:13:47,556 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:13:47,629 INFO L263 TraceCheckSpWp]: Trace formula consists of 1580 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:13:47,635 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:13:49,326 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-20 06:13:49,327 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:13:50,395 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-20 06:13:50,395 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:13:50,396 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [1703337631] [2021-11-20 06:13:50,396 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [1703337631] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:13:50,396 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:13:50,396 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:13:50,397 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [3937182] [2021-11-20 06:13:50,397 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:13:50,398 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:13:50,398 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:13:50,398 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:13:50,399 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:13:50,399 INFO L87 Difference]: Start difference. First operand 15747 states and 23006 transitions. Second operand has 4 states, 4 states have (on average 68.25) internal successors, (273), 4 states have internal predecessors, (273), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:13:52,850 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:13:52,850 INFO L93 Difference]: Finished difference Result 31437 states and 45931 transitions. [2021-11-20 06:13:52,851 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:13:52,851 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 68.25) internal successors, (273), 4 states have internal predecessors, (273), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 290 [2021-11-20 06:13:52,851 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:13:52,904 INFO L225 Difference]: With dead ends: 31437 [2021-11-20 06:13:52,904 INFO L226 Difference]: Without dead ends: 15723 [2021-11-20 06:13:52,938 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 578 GetRequests, 576 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:13:52,939 INFO L933 BasicCegarLoop]: 2260 mSDtfsCounter, 3758 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 742 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3758 SdHoareTripleChecker+Valid, 2260 SdHoareTripleChecker+Invalid, 743 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 742 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.5s IncrementalHoareTripleChecker+Time [2021-11-20 06:13:52,939 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3758 Valid, 2260 Invalid, 743 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [742 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.5s Time] [2021-11-20 06:13:52,950 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15723 states. [2021-11-20 06:13:53,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15723 to 15723. [2021-11-20 06:13:53,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15723 states, 11089 states have (on average 1.394535124898548) internal successors, (15464), 11687 states have internal predecessors, (15464), 3633 states have call successors, (3633), 988 states have call predecessors, (3633), 1000 states have return successors, (3855), 3323 states have call predecessors, (3855), 3631 states have call successors, (3855) [2021-11-20 06:13:53,984 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15723 states to 15723 states and 22952 transitions. [2021-11-20 06:13:53,988 INFO L78 Accepts]: Start accepts. Automaton has 15723 states and 22952 transitions. Word has length 290 [2021-11-20 06:13:53,988 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:13:53,989 INFO L470 AbstractCegarLoop]: Abstraction has 15723 states and 22952 transitions. [2021-11-20 06:13:53,989 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 68.25) internal successors, (273), 4 states have internal predecessors, (273), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:13:53,989 INFO L276 IsEmpty]: Start isEmpty. Operand 15723 states and 22952 transitions. [2021-11-20 06:13:54,052 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 293 [2021-11-20 06:13:54,052 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:13:54,052 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:13:54,085 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (19)] Forceful destruction successful, exit code 0 [2021-11-20 06:13:54,277 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 19 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:13:54,277 INFO L402 AbstractCegarLoop]: === Iteration 19 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:13:54,278 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:13:54,278 INFO L85 PathProgramCache]: Analyzing trace with hash 1857137467, now seen corresponding path program 1 times [2021-11-20 06:13:54,279 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:13:54,279 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [987077071] [2021-11-20 06:13:54,279 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:13:54,280 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:13:54,280 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:13:54,280 INFO L229 MonitoredProcess]: Starting monitored process 20 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:13:54,285 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (20)] Waiting until timeout for monitored process [2021-11-20 06:13:55,411 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:13:55,478 INFO L263 TraceCheckSpWp]: Trace formula consists of 1584 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:13:55,483 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:13:57,092 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-20 06:13:57,092 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:13:58,293 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-20 06:13:58,294 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:13:58,294 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [987077071] [2021-11-20 06:13:58,294 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [987077071] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:13:58,294 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:13:58,294 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:13:58,294 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1300448171] [2021-11-20 06:13:58,294 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:13:58,295 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:13:58,295 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:13:58,296 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:13:58,296 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:13:58,296 INFO L87 Difference]: Start difference. First operand 15723 states and 22952 transitions. Second operand has 4 states, 4 states have (on average 69.25) internal successors, (277), 4 states have internal predecessors, (277), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:14:00,482 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:14:00,483 INFO L93 Difference]: Finished difference Result 31389 states and 45823 transitions. [2021-11-20 06:14:00,483 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:14:00,483 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 69.25) internal successors, (277), 4 states have internal predecessors, (277), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 292 [2021-11-20 06:14:00,484 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:14:00,532 INFO L225 Difference]: With dead ends: 31389 [2021-11-20 06:14:00,532 INFO L226 Difference]: Without dead ends: 15699 [2021-11-20 06:14:00,566 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 582 GetRequests, 580 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:14:00,567 INFO L933 BasicCegarLoop]: 2256 mSDtfsCounter, 3748 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 740 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 1.2s Time, 0 mProtectedPredicate, 0 mProtectedAction, 3748 SdHoareTripleChecker+Valid, 2256 SdHoareTripleChecker+Invalid, 741 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 740 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 1.4s IncrementalHoareTripleChecker+Time [2021-11-20 06:14:00,567 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [3748 Valid, 2256 Invalid, 741 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [740 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 1.4s Time] [2021-11-20 06:14:00,578 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15699 states. [2021-11-20 06:14:01,327 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15699 to 15699. [2021-11-20 06:14:01,339 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15699 states, 11077 states have (on average 1.3938792091721586) internal successors, (15440), 11675 states have internal predecessors, (15440), 3621 states have call successors, (3621), 988 states have call predecessors, (3621), 1000 states have return successors, (3837), 3311 states have call predecessors, (3837), 3619 states have call successors, (3837) [2021-11-20 06:14:01,509 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15699 states to 15699 states and 22898 transitions. [2021-11-20 06:14:01,514 INFO L78 Accepts]: Start accepts. Automaton has 15699 states and 22898 transitions. Word has length 292 [2021-11-20 06:14:01,514 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:14:01,515 INFO L470 AbstractCegarLoop]: Abstraction has 15699 states and 22898 transitions. [2021-11-20 06:14:01,515 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 69.25) internal successors, (277), 4 states have internal predecessors, (277), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:14:01,515 INFO L276 IsEmpty]: Start isEmpty. Operand 15699 states and 22898 transitions. [2021-11-20 06:14:01,548 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 292 [2021-11-20 06:14:01,548 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:14:01,549 INFO L514 BasicCegarLoop]: trace histogram [8, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 4, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:14:01,576 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (20)] Forceful destruction successful, exit code 0 [2021-11-20 06:14:01,749 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 20 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:14:01,750 INFO L402 AbstractCegarLoop]: === Iteration 20 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:14:01,750 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:14:01,750 INFO L85 PathProgramCache]: Analyzing trace with hash -1183594878, now seen corresponding path program 1 times [2021-11-20 06:14:01,752 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:14:01,752 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [2059014395] [2021-11-20 06:14:01,752 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:14:01,752 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:14:01,752 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:14:01,753 INFO L229 MonitoredProcess]: Starting monitored process 21 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:14:01,755 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (21)] Waiting until timeout for monitored process [2021-11-20 06:14:02,896 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-11-20 06:14:02,961 INFO L263 TraceCheckSpWp]: Trace formula consists of 1582 conjuncts, 2 conjunts are in the unsatisfiable core [2021-11-20 06:14:02,971 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-11-20 06:14:04,599 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 21 proven. 0 refuted. 0 times theorem prover too weak. 144 trivial. 0 not checked. [2021-11-20 06:14:04,600 INFO L328 TraceCheckSpWp]: Computing backward predicates... [2021-11-20 06:14:05,704 INFO L134 CoverageAnalysis]: Checked inductivity of 165 backedges. 5 proven. 0 refuted. 0 times theorem prover too weak. 160 trivial. 0 not checked. [2021-11-20 06:14:05,705 INFO L139 FreeRefinementEngine]: Strategy WOLF found an infeasible trace [2021-11-20 06:14:05,705 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleMathsat [2059014395] [2021-11-20 06:14:05,705 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleMathsat [2059014395] provided 2 perfect and 0 imperfect interpolant sequences [2021-11-20 06:14:05,705 INFO L186 FreeRefinementEngine]: Found 2 perfect and 0 imperfect interpolant sequences. [2021-11-20 06:14:05,705 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3, 3] imperfect sequences [] total 4 [2021-11-20 06:14:05,706 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2050249579] [2021-11-20 06:14:05,706 INFO L85 oduleStraightlineAll]: Using 2 perfect interpolants to construct interpolant automaton [2021-11-20 06:14:05,707 INFO L546 AbstractCegarLoop]: INTERPOLANT automaton has 4 states [2021-11-20 06:14:05,707 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy WOLF [2021-11-20 06:14:05,707 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2021-11-20 06:14:05,707 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:14:05,708 INFO L87 Difference]: Start difference. First operand 15699 states and 22898 transitions. Second operand has 4 states, 4 states have (on average 68.75) internal successors, (275), 4 states have internal predecessors, (275), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:14:06,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-11-20 06:14:06,629 INFO L93 Difference]: Finished difference Result 31341 states and 45715 transitions. [2021-11-20 06:14:06,629 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-11-20 06:14:06,630 INFO L78 Accepts]: Start accepts. Automaton has has 4 states, 4 states have (on average 68.75) internal successors, (275), 4 states have internal predecessors, (275), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) Word has length 291 [2021-11-20 06:14:06,630 INFO L84 Accepts]: Finished accepts. some prefix is accepted. [2021-11-20 06:14:06,678 INFO L225 Difference]: With dead ends: 31341 [2021-11-20 06:14:06,679 INFO L226 Difference]: Without dead ends: 15675 [2021-11-20 06:14:06,711 INFO L932 BasicCegarLoop]: 0 DeclaredPredicates, 580 GetRequests, 578 SyntacticMatches, 0 SemanticMatches, 2 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 0 ImplicationChecksByTransitivity, 0.1s TimeCoverageRelationStatistics Valid=6, Invalid=6, Unknown=0, NotChecked=0, Total=12 [2021-11-20 06:14:06,712 INFO L933 BasicCegarLoop]: 2252 mSDtfsCounter, 2240 mSDsluCounter, 0 mSDsCounter, 0 mSdLazyCounter, 1 mSolverCounterSat, 1 mSolverCounterUnsat, 0 mSolverCounterUnknown, 0 mSolverCounterNotChecked, 0.1s Time, 0 mProtectedPredicate, 0 mProtectedAction, 2240 SdHoareTripleChecker+Valid, 2252 SdHoareTripleChecker+Invalid, 2 SdHoareTripleChecker+Unknown, 0 SdHoareTripleChecker+Unchecked, 0.0s SdHoareTripleChecker+Time, 1 IncrementalHoareTripleChecker+Valid, 1 IncrementalHoareTripleChecker+Invalid, 0 IncrementalHoareTripleChecker+Unknown, 0 IncrementalHoareTripleChecker+Unchecked, 0.1s IncrementalHoareTripleChecker+Time [2021-11-20 06:14:06,712 INFO L934 BasicCegarLoop]: SdHoareTripleChecker [2240 Valid, 2252 Invalid, 2 Unknown, 0 Unchecked, 0.0s Time], IncrementalHoareTripleChecker [1 Valid, 1 Invalid, 0 Unknown, 0 Unchecked, 0.1s Time] [2021-11-20 06:14:06,725 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15675 states. [2021-11-20 06:14:07,586 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15675 to 15675. [2021-11-20 06:14:07,594 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 15675 states, 11065 states have (on average 1.3932218707636692) internal successors, (15416), 11663 states have internal predecessors, (15416), 3609 states have call successors, (3609), 988 states have call predecessors, (3609), 1000 states have return successors, (3819), 3299 states have call predecessors, (3819), 3607 states have call successors, (3819) [2021-11-20 06:14:07,641 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 15675 states to 15675 states and 22844 transitions. [2021-11-20 06:14:07,644 INFO L78 Accepts]: Start accepts. Automaton has 15675 states and 22844 transitions. Word has length 291 [2021-11-20 06:14:07,644 INFO L84 Accepts]: Finished accepts. word is rejected. [2021-11-20 06:14:07,644 INFO L470 AbstractCegarLoop]: Abstraction has 15675 states and 22844 transitions. [2021-11-20 06:14:07,644 INFO L471 AbstractCegarLoop]: INTERPOLANT automaton has has 4 states, 4 states have (on average 68.75) internal successors, (275), 4 states have internal predecessors, (275), 2 states have call successors, (60), 2 states have call predecessors, (60), 2 states have return successors, (59), 2 states have call predecessors, (59), 2 states have call successors, (59) [2021-11-20 06:14:07,645 INFO L276 IsEmpty]: Start isEmpty. Operand 15675 states and 22844 transitions. [2021-11-20 06:14:07,664 INFO L282 IsEmpty]: Finished isEmpty. Found accepting run of length 316 [2021-11-20 06:14:07,665 INFO L506 BasicCegarLoop]: Found error trace [2021-11-20 06:14:07,665 INFO L514 BasicCegarLoop]: trace histogram [8, 7, 7, 7, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 6, 3, 3, 3, 3, 3, 3, 3, 3, 3, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:14:07,700 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (21)] Forceful destruction successful, exit code 0 [2021-11-20 06:14:07,879 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 21 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:14:07,880 INFO L402 AbstractCegarLoop]: === Iteration 21 === Targeting ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION === [ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION] === [2021-11-20 06:14:07,880 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-11-20 06:14:07,880 INFO L85 PathProgramCache]: Analyzing trace with hash 924065820, now seen corresponding path program 1 times [2021-11-20 06:14:07,881 INFO L121 FreeRefinementEngine]: Executing refinement strategy WOLF [2021-11-20 06:14:07,881 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleMathsat [46437263] [2021-11-20 06:14:07,882 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-11-20 06:14:07,882 INFO L168 SolverBuilder]: Constructing external solver with command: mathsat -unsat_core_generation=3 [2021-11-20 06:14:07,882 INFO L189 MonitoredProcess]: No working directory specified, using /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat [2021-11-20 06:14:07,883 INFO L229 MonitoredProcess]: Starting monitored process 22 with /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (exit command is (exit), workingDir is null) [2021-11-20 06:14:07,887 INFO L327 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (22)] Waiting until timeout for monitored process [2021-11-20 06:14:20,746 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:14:20,746 INFO L355 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-11-20 06:14:27,251 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-11-20 06:14:29,340 INFO L133 FreeRefinementEngine]: Strategy WOLF found a feasible trace [2021-11-20 06:14:29,340 INFO L628 BasicCegarLoop]: Counterexample is feasible [2021-11-20 06:14:29,341 INFO L764 garLoopResultBuilder]: Registering result UNSAFE for location ldv_errorErr0ASSERT_VIOLATIONERROR_FUNCTION (0 of 1 remaining) [2021-11-20 06:14:29,387 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 (22)] Forceful destruction successful, exit code 0 [2021-11-20 06:14:29,543 WARN L452 AbstractCegarLoop]: Destroyed unattended storables created during the last iteration: 22 /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/mathsat -unsat_core_generation=3 [2021-11-20 06:14:29,547 INFO L732 BasicCegarLoop]: Path program histogram: [2, 2, 2, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-11-20 06:14:29,550 INFO L179 ceAbstractionStarter]: Computing trace abstraction results [2021-11-20 06:14:29,674 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-20 06:14:29,683 WARN L418 cessorBacktranslator]: Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) [2021-11-20 06:14:30,262 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction CFG 20.11 06:14:30 BoogieIcfgContainer [2021-11-20 06:14:30,263 INFO L132 PluginConnector]: ------------------------ END TraceAbstraction---------------------------- [2021-11-20 06:14:30,263 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2021-11-20 06:14:30,263 INFO L271 PluginConnector]: Initializing Witness Printer... [2021-11-20 06:14:30,264 INFO L275 PluginConnector]: Witness Printer initialized [2021-11-20 06:14:30,264 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 06:11:51" (3/4) ... [2021-11-20 06:14:30,269 INFO L140 WitnessPrinter]: No result that supports witness generation found [2021-11-20 06:14:30,270 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2021-11-20 06:14:30,270 INFO L158 Benchmark]: Toolchain (without parser) took 220585.08ms. Allocated memory was 54.5MB in the beginning and 5.9GB in the end (delta: 5.8GB). Free memory was 33.2MB in the beginning and 4.5GB in the end (delta: -4.4GB). Peak memory consumption was 1.4GB. Max. memory is 16.1GB. [2021-11-20 06:14:30,271 INFO L158 Benchmark]: CDTParser took 0.29ms. Allocated memory is still 54.5MB. Free memory was 35.1MB in the beginning and 35.1MB in the end (delta: 43.8kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:14:30,272 INFO L158 Benchmark]: CACSL2BoogieTranslator took 3394.79ms. Allocated memory was 54.5MB in the beginning and 203.4MB in the end (delta: 148.9MB). Free memory was 32.9MB in the beginning and 125.2MB in the end (delta: -92.4MB). Peak memory consumption was 60.3MB. Max. memory is 16.1GB. [2021-11-20 06:14:30,272 INFO L158 Benchmark]: Boogie Procedure Inliner took 313.74ms. Allocated memory is still 203.4MB. Free memory was 125.2MB in the beginning and 101.2MB in the end (delta: 24.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. [2021-11-20 06:14:30,272 INFO L158 Benchmark]: Boogie Preprocessor took 387.75ms. Allocated memory is still 203.4MB. Free memory was 101.2MB in the beginning and 109.0MB in the end (delta: -7.8MB). Peak memory consumption was 14.2MB. Max. memory is 16.1GB. [2021-11-20 06:14:30,277 INFO L158 Benchmark]: RCFGBuilder took 58137.15ms. Allocated memory was 203.4MB in the beginning and 432.0MB in the end (delta: 228.6MB). Free memory was 109.0MB in the beginning and 247.9MB in the end (delta: -138.9MB). Peak memory consumption was 186.9MB. Max. memory is 16.1GB. [2021-11-20 06:14:30,278 INFO L158 Benchmark]: TraceAbstraction took 158330.52ms. Allocated memory was 432.0MB in the beginning and 5.9GB in the end (delta: 5.4GB). Free memory was 247.9MB in the beginning and 4.5GB in the end (delta: -4.2GB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. [2021-11-20 06:14:30,280 INFO L158 Benchmark]: Witness Printer took 6.35ms. Allocated memory is still 5.9GB. Free memory was 4.5GB in the beginning and 4.5GB in the end (delta: 674.1kB). There was no memory consumed. Max. memory is 16.1GB. [2021-11-20 06:14:30,287 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.29ms. Allocated memory is still 54.5MB. Free memory was 35.1MB in the beginning and 35.1MB in the end (delta: 43.8kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 3394.79ms. Allocated memory was 54.5MB in the beginning and 203.4MB in the end (delta: 148.9MB). Free memory was 32.9MB in the beginning and 125.2MB in the end (delta: -92.4MB). Peak memory consumption was 60.3MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 313.74ms. Allocated memory is still 203.4MB. Free memory was 125.2MB in the beginning and 101.2MB in the end (delta: 24.1MB). Peak memory consumption was 23.1MB. Max. memory is 16.1GB. * Boogie Preprocessor took 387.75ms. Allocated memory is still 203.4MB. Free memory was 101.2MB in the beginning and 109.0MB in the end (delta: -7.8MB). Peak memory consumption was 14.2MB. Max. memory is 16.1GB. * RCFGBuilder took 58137.15ms. Allocated memory was 203.4MB in the beginning and 432.0MB in the end (delta: 228.6MB). Free memory was 109.0MB in the beginning and 247.9MB in the end (delta: -138.9MB). Peak memory consumption was 186.9MB. Max. memory is 16.1GB. * TraceAbstraction took 158330.52ms. Allocated memory was 432.0MB in the beginning and 5.9GB in the end (delta: 5.4GB). Free memory was 247.9MB in the beginning and 4.5GB in the end (delta: -4.2GB). Peak memory consumption was 1.2GB. Max. memory is 16.1GB. * Witness Printer took 6.35ms. Allocated memory is still 5.9GB. Free memory was 4.5GB in the beginning and 4.5GB in the end (delta: 674.1kB). There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.boogie.preprocessor: - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) - GenericResult: Unfinished Backtranslation Generated EnsuresSpecification free ensures #res.base == #ptr.base && #res.offset == #ptr.offset; is not ensure(true) * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: - GenericResult: Unfinished Backtranslation The program execution was not completely translated back. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: ErrorAutomatonStatistics NumberErrorTraces: 0, NumberStatementsAllTraces: 0, NumberRelevantStatements: 0, 0.0s ErrorAutomatonConstructionTimeTotal, 0.0s FaulLocalizationTime, NumberStatementsFirstTrace: -1, TraceLengthAvg: 0, 0.0s ErrorAutomatonConstructionTimeAvg, 0.0s ErrorAutomatonDifferenceTimeAvg, 0.0s ErrorAutomatonDifferenceTimeTotal, NumberOfNoEnhancement: 0, NumberOfFiniteEnhancement: 0, NumberOfInfiniteEnhancement: 0 - UnprovableResult [Line: 8176]: Unable to prove that call to reach_error is unreachable Unable to prove that call to reach_error is unreachable Reason: overapproximation of large string literal at line 6875. Possible FailurePath: [L4318] int ldv_timer_state_5 = 0; [L4319] int ldv_state_variable_8 ; [L4320] struct timer_list *ldv_timer_list_5 ; [L4321] struct timer_list *ldv_timer_list_4 ; [L4322] struct work_struct *ldv_work_struct_3_1 ; [L4323] struct mmc_host *vub300_mmc_ops_group0 ; [L4324] struct work_struct *ldv_work_struct_1_3 ; [L4325] int ldv_state_variable_0 ; [L4326] int ldv_state_variable_5 ; [L4327] int ldv_work_1_1 ; [L4328] int ldv_work_3_2 ; [L4329] int ldv_work_3_0 ; [L4330] struct work_struct *ldv_work_struct_2_3 ; [L4331] struct work_struct *ldv_work_struct_2_0 ; [L4332] int ldv_timer_state_6 = 0; [L4333] struct work_struct *ldv_work_struct_2_2 ; [L4334] int ldv_timer_state_4 = 0; [L4335] int ref_cnt ; [L4336] int ldv_work_3_3 ; [L4337] int ldv_state_variable_1 ; [L4338] int ldv_state_variable_7 ; [L4339] struct work_struct *ldv_work_struct_3_3 ; [L4340] struct work_struct *ldv_work_struct_1_0 ; [L4341] struct work_struct *ldv_work_struct_1_1 ; [L4342] int ldv_work_1_3 ; [L4343] struct work_struct *ldv_work_struct_2_1 ; [L4344] struct timer_list *ldv_timer_list_6 ; [L4345] struct work_struct *ldv_work_struct_3_2 ; [L4346] int ldv_state_variable_6 ; [L4347] int ldv_work_3_1 ; [L4348] int ldv_state_variable_2 ; [L4349] int ldv_work_2_0 ; [L4350] int usb_counter ; [L4351] struct work_struct *ldv_work_struct_3_0 ; [L4352] int ldv_work_1_2 ; [L4353] int LDV_IN_INTERRUPT = 1; [L4354] struct work_struct *ldv_work_struct_1_2 ; [L4355] int ldv_work_2_2 ; [L4356] int ldv_state_variable_3 ; [L4357] struct usb_interface *vub300_driver_group1 ; [L4358] int ldv_work_1_0 ; [L4359] int ldv_work_2_3 ; [L4360] int ldv_state_variable_4 ; [L4361] int ldv_work_2_1 ; [L4422] static bool limit_speed_to_24_MHz ; [L4423] static bool pad_input_to_usb_pkt ; [L4424] static bool disable_offload_processing ; [L4425] static bool force_1_bit_data_xfers ; [L4426] static bool force_polling_for_irqs ; [L4427] static int firmware_irqpoll_timeout = 1024; [L4428] static int force_max_req_size = 128; [L4429] static int firmware_rom_wait_states = 28; [L4430-L4435] static struct usb_device_id vub300_table[3U] = { {3U, 8705U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}, {3U, 1060U, 300U, (unsigned short)0, (unsigned short)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, (unsigned char)0, 0UL}}; [L4436] struct usb_device_id const __mod_usb_device_table ; [L4437] static struct workqueue_struct *cmndworkqueue ; [L4438] static struct workqueue_struct *pollworkqueue ; [L4439] static struct workqueue_struct *deadworkqueue ; [L6425-L6427] static struct mmc_host_ops vub300_mmc_ops = {0, 0, 0, 0, & vub300_mmc_request, & vub300_mmc_set_ios, & vub300_mmc_get_ro, 0, & vub300_enable_sdio_irq, & vub300_init_card, 0, 0, 0, 0, 0}; [L6835-L6841] static struct usb_driver vub300_driver = {"vub300", & vub300_probe, & vub300_disconnect, 0, & vub300_suspend, & vub300_resume, 0, & vub300_pre_reset, & vub300_post_reset, (struct usb_device_id const *)(& vub300_table), {{{{{{0U}}, 0U, 0U, 0, {0, {0, 0}, 0, 0, 0UL}}}}, {0, 0}}, {{0, 0, 0, 0, (_Bool)0, 0, 0, 0, 0, 0, 0, 0, 0, 0}, 0}, (unsigned char)0, 1U, (unsigned char)0, (unsigned char)0}; [L6914] int ldv_retval_0 ; [L6916] int ldv_retval_1 ; [L6919] int ldv_retval_3 ; [L6920] int ldv_retval_2 ; [L8179] int URB_STATE = 0; [L8180] int DEV_STATE = 0; [L8181] int INTERF_STATE = 0; [L8182] int SERIAL_STATE = 0; [L8183] void *usb_intfdata = (void *)0; [L8184] struct urb *int_urb = (struct urb *)0; [L8185] struct urb *bulk_urb = (struct urb *)0; [L8186] void (*completeFnInt)(struct urb * ) ; [L8187] void (*completeFnBulk)(struct urb * ) ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7559] struct usb_device_id *ldvarg1 ; [L7560] void *tmp ; [L7561] pm_message_t ldvarg0 ; [L7562] struct mmc_card *ldvarg4 ; [L7563] void *tmp___0 ; [L7564] struct mmc_ios *ldvarg3 ; [L7565] void *tmp___1 ; [L7566] int ldvarg5 ; [L7567] struct mmc_request *ldvarg2 ; [L7568] void *tmp___2 ; [L7569] int tmp___3 ; [L7570] int tmp___4 ; [L7571] int tmp___5 ; [L7572] int tmp___6 ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] CALL, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3461802728202174385:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3461802728202174385:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3461802728202174385:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={3461802728202174385:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3461802728202174385:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3461802728202174385:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={3461802728202174385:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=32, \result={3461802728202174385:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3461802728202174385:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3461802728202174385:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=32, tmp={3461802728202174385:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] RET, EXPR ldv_init_zalloc(32UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(32UL)={3461802728202174385:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7574] tmp = ldv_init_zalloc(32UL) [L7575] ldvarg1 = (struct usb_device_id *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] CALL, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108447:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108447:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533847963858108447:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={3533847963858108447:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1816, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108447:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533847963858108447:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={3533847963858108447:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1816, \result={3533847963858108447:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108447:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533847963858108447:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=1816, tmp={3533847963858108447:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] RET, EXPR ldv_init_zalloc(1816UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1816UL)={3533847963858108447:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7576] tmp___0 = ldv_init_zalloc(1816UL) [L7577] ldvarg4 = (struct mmc_card *)tmp___0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] CALL, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533860318213570472:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533860318213570472:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533860318213570472:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={3533860318213570472:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=16, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533860318213570472:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533860318213570472:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={3533860318213570472:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=16, \result={3533860318213570472:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533860318213570472:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533860318213570472:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=16, tmp={3533860318213570472:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] RET, EXPR ldv_init_zalloc(16UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(16UL)={3533860318213570472:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7578] tmp___1 = ldv_init_zalloc(16UL) [L7579] ldvarg3 = (struct mmc_ios *)tmp___1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] CALL, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108446:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108446:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533847963858108446:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={3533847963858108446:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, cond=1, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=136, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108446:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533847963858108446:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={3533847963858108446:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=136, \result={3533847963858108446:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, calloc(1UL, size)={3533847963858108446:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533847963858108446:0}, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, size=136, tmp={3533847963858108446:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] RET, EXPR ldv_init_zalloc(136UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(136UL)={3533847963858108446:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7580] tmp___2 = ldv_init_zalloc(136UL) [L7581] ldvarg2 = (struct mmc_request *)tmp___2 [L7582] FCALL ldv_initialize() [L7583] CALL ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071838569372319728:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071838569372319728:0}, s={-1071838569372319728:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-1071838569372319728:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071838569372319728:0}, s={-1071838569372319728:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-1071838569372319728:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071838569372319728:0}, s={-1071838569372319728:0}, SERIAL_STATE=0, tmp={-1071838569372319728:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7583] RET ldv_memset((void *)(& ldvarg0), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg0), 0, 4UL)={-1071838569372319728:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] CALL ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071844066930458607:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4283] void *tmp ; VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071844066930458607:0}, s={-1071844066930458607:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] EXPR, FCALL memset(s, c, n) VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, memset(s, c, n)={-1071844066930458607:0}, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071844066930458607:0}, s={-1071844066930458607:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4285] tmp = memset(s, c, n) [L4286] return (tmp); VAL [={0:0}, ={0:0}, \old(c)=0, \old(n)=4, \result={-1071844066930458607:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, c=0, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, n=4, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, s={-1071844066930458607:0}, s={-1071844066930458607:0}, SERIAL_STATE=0, tmp={-1071844066930458607:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7584] RET ldv_memset((void *)(& ldvarg5), 0, 4UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_memset((void *)(& ldvarg5), 0, 4UL)={-1071844066930458607:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=0, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7585] ldv_state_variable_6 = 1 [L7586] CALL work_init_3() [L6924] ldv_work_3_0 = 0 [L6925] ldv_work_3_1 = 0 [L6926] ldv_work_3_2 = 0 [L6927] ldv_work_3_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=0, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7586] RET work_init_3() [L7587] ldv_state_variable_3 = 1 [L7588] ldv_state_variable_7 = 0 [L7589] CALL work_init_2() [L6974] ldv_work_2_0 = 0 [L6975] ldv_work_2_1 = 0 [L6976] ldv_work_2_2 = 0 [L6977] ldv_work_2_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=0, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7589] RET work_init_2() [L7590] ldv_state_variable_2 = 1 [L7591] ldv_state_variable_8 = 0 [L7592] CALL work_init_1() [L7342] ldv_work_1_0 = 0 [L7343] ldv_work_1_1 = 0 [L7344] ldv_work_1_2 = 0 [L7345] ldv_work_1_3 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=0, ldv_state_variable_1=0, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=0, ldv_state_variable_5=0, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7592] RET work_init_1() [L7593] ldv_state_variable_1 = 1 [L7594] ldv_state_variable_4 = 1 [L7595] ref_cnt = 0 [L7596] ldv_state_variable_0 = 1 [L7597] ldv_state_variable_5 = 1 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=7, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: [L7752] case 1: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:0}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7753] COND TRUE ldv_state_variable_0 == 1 [L7754] CALL, EXPR vub300_init() [L6844] int result ; [L6845] struct lock_class_key __key ; [L6846] char const *__lock_name ; [L6847] struct workqueue_struct *tmp ; [L6848] struct lock_class_key __key___0 ; [L6849] char const *__lock_name___0 ; [L6850] struct workqueue_struct *tmp___0 ; [L6851] struct lock_class_key __key___1 ; [L6852] char const *__lock_name___1 ; [L6853] struct workqueue_struct *tmp___1 ; [L6857] __lock_name = "kvub300c" [L6858] tmp = __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name) [L6859] cmndworkqueue = tmp VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:4611686018427387904}, __key={3533860322240102315:0}, __key___0={-5689454254931574855:0}, __key___1={3533860463705587625:0}, __lock_name={73:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={0:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:4611686018427387904}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6860] COND FALSE !((unsigned long )cmndworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6866] __lock_name___0 = "kvub300p" [L6867] tmp___0 = __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0) [L6868] pollworkqueue = tmp___0 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:4611686018427387904}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372036854773760:0}, __key={3533860322240102315:0}, __key___0={-5689454254931574855:0}, __key___1={3533860463705587625:0}, __lock_name={73:0}, __lock_name___0={76:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:0}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:4611686018427387904}, tmp___0={-9223372036854773760:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6869] COND FALSE !((unsigned long )pollworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6875] __lock_name___1 = "kvub300d" [L6876] tmp___1 = __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1) [L6877] deadworkqueue = tmp___1 VAL [={0:0}, ={0:0}, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:4611686018427387904}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={0:-9223372036854775808}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372036854773760:0}, __key={3533860322240102315:0}, __key___0={-5689454254931574855:0}, __key___1={3533860463705587625:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:4611686018427387904}, tmp___0={-9223372036854773760:0}, tmp___1={0:-9223372036854775808}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6878] COND FALSE !((unsigned long )deadworkqueue == (unsigned long )((struct workqueue_struct *)0)) [L6884] CALL, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L8081] ldv_func_ret_type___12 ldv_func_res ; [L8082] int tmp ; [L8084] CALL, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8556] return __VERIFIER_nondet_int(); [L8084] RET, EXPR usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8084] tmp = usb_register_driver(ldv_func_arg1, ldv_func_arg2, ldv_func_arg3) [L8085] ldv_func_res = tmp [L8086] ldv_state_variable_7 = 1 [L8087] usb_counter = 0 [L8088] CALL ldv_usb_driver_7() [L7213] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] CALL, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={53326699823169:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={53326699823169:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={53326699823169:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={53326699823169:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, cond=1, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1288, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={53326699823169:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={53326699823169:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={53326699823169:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=1288, \result={53326699823169:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={53326699823169:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={53326699823169:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=1288, tmp={53326699823169:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] RET, EXPR ldv_init_zalloc(1288UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(1288UL)={53326699823169:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={0:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7215] tmp = ldv_init_zalloc(1288UL) [L7216] vub300_driver_group1 = (struct usb_interface *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={53326699823169:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L8088] RET ldv_usb_driver_7() [L8089] return (ldv_func_res); VAL [={0:0}, ={0:0}, \result=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={86:0}, ldv_func_arg1={86:0}, ldv_func_arg2={94:93}, ldv_func_arg2={94:93}, ldv_func_arg3={82:0}, ldv_func_arg3={82:0}, ldv_func_res=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L6884] RET, EXPR ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6884] result = ldv_usb_register_driver_56(& vub300_driver, & __this_module, "vub300") [L6885] COND FALSE !(result != 0) [L6890] return (0); [L6890] return (0); [L6890] return (0); [L6890] return (0); VAL [={0:0}, ={0:0}, \result=0, __alloc_workqueue_key("kvub300c", 10U, 1, & __key, __lock_name)={0:4611686018427387904}, __alloc_workqueue_key("kvub300d", 10U, 1, & __key___1, __lock_name___1)={0:-9223372036854775808}, __alloc_workqueue_key("kvub300p", 10U, 1, & __key___0, __lock_name___0)={-9223372036854773760:0}, __lock_name={73:0}, __lock_name___0={76:0}, __lock_name___1={79:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=1, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=0, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, result=0, SERIAL_STATE=0, tmp={0:4611686018427387904}, tmp___0={-9223372036854773760:0}, tmp___1={0:-9223372036854775808}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7754] RET, EXPR vub300_init() [L7754] ldv_retval_3 = vub300_init() [L7755] COND TRUE ldv_retval_3 == 0 [L7756] ldv_state_variable_0 = 3 [L7757] ldv_state_variable_8 = 1 [L7758] CALL ldv_initialize_mmc_host_ops_8() [L7193] void *tmp ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] CALL, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4272] void *p ; [L4273] void *tmp ; [L4275] EXPR, FCALL calloc(1UL, size) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={3533860188827680680:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4275] tmp = calloc(1UL, size) [L4276] p = tmp VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={3533860188827680680:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533860188827680680:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={3533860188827680680:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, cond=1, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4277] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=2624, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={3533860188827680680:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533860188827680680:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={3533860188827680680:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L4278] return (p); VAL [={0:0}, ={0:0}, \old(size)=2624, \result={3533860188827680680:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, calloc(1UL, size)={3533860188827680680:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={3533860188827680680:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=2624, tmp={3533860188827680680:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] RET, EXPR ldv_init_zalloc(2624UL) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_init_zalloc(2624UL)={3533860188827680680:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={0:0}, vub300_table={84:0}] [L7195] tmp = ldv_init_zalloc(2624UL) [L7196] vub300_mmc_ops_group0 = (struct mmc_host *)tmp VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3533860188827680680:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7758] RET ldv_initialize_mmc_host_ops_8() [L7761] COND FALSE !(ldv_retval_3 != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=7, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=2, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7614] COND TRUE ldv_state_variable_7 != 0 [L7615] tmp___4 = __VERIFIER_nondet_int() [L7617] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7618] COND TRUE ldv_state_variable_7 == 1 [L7619] CALL, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L6430] struct vub300_mmc_host *vub300 ; [L6431] struct usb_host_interface *iface_desc ; [L6432] struct usb_device *udev ; [L6433] struct usb_device *tmp ; [L6434] struct usb_device *tmp___0 ; [L6435] int i ; [L6436] int retval ; [L6437] struct urb *command_out_urb ; [L6438] struct urb *command_res_urb ; [L6439] struct mmc_host *mmc ; [L6440] char manufacturer[48U] ; [L6441] char product[32U] ; [L6442] char serial_number[32U] ; [L6443] void *tmp___1 ; [L6444] struct lock_class_key __key ; [L6445] struct lock_class_key __key___0 ; [L6446] int tmp___2 ; [L6447] struct usb_endpoint_descriptor *endpoint ; [L6448] int tmp___4 ; [L6449] char *tmp___5 ; [L6450] int tmp___6 ; [L6451] int tmp___7 ; [L6452] int tmp___8 ; [L6453] unsigned int tmp___9 ; [L6454] unsigned int tmp___10 ; [L6455] unsigned int tmp___11 ; [L6456] struct lock_class_key __key___1 ; [L6457] atomic_long_t __constr_expr_0 ; [L6458] struct lock_class_key __key___2 ; [L6459] atomic_long_t __constr_expr_1 ; [L6460] struct lock_class_key __key___3 ; [L6461] atomic_long_t __constr_expr_2 ; [L6462] int tmp___12 ; [L6463] int tmp___13 ; [L6465] CALL, EXPR interface_to_usbdev(interface) [L7824] struct usb_device *tmp ; [L7826] CALL, EXPR ldv_interface_to_usbdev() [L8302] void *result ; VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8307] CALL, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND FALSE !(tmp___0 != 0) [L4246] tmp = malloc(size) [L4247] p = tmp VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2048:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={2048:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L4248] CALL assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L4234] COND FALSE !(!cond) VAL [={0:0}, ={0:0}, \old(cond)=1, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, cond=1, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L4248] RET assume_abort_if_not((unsigned long )p != (unsigned long )((void *)0)) VAL [={0:0}, ={0:0}, \old(size)=1678, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2048:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={2048:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L4249] return (p); VAL [={0:0}, ={0:0}, \old(size)=1678, \result={2048:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, p={2048:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=1678, tmp={2048:0}, tmp___0=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8307] RET, EXPR ldv_malloc(sizeof(struct usb_device)) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct usb_device))={2048:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8307] result = ldv_malloc(sizeof(struct usb_device)) [L8308] COND FALSE !((unsigned long )result == (unsigned long )((void *)0)) [L8312] return ((struct usb_device *)result); VAL [={0:0}, ={0:0}, \result={2048:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, result={2048:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7826] RET, EXPR ldv_interface_to_usbdev() [L7826] tmp = ldv_interface_to_usbdev() [L7827] return (tmp); VAL [={0:0}, ={0:0}, \result={2048:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=0, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, intf={53326699823169:0}, intf={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={2048:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6465] RET, EXPR interface_to_usbdev(interface) [L6465] tmp = interface_to_usbdev(interface) [L6466] CALL, EXPR ldv_usb_get_dev_43(tmp) [L8021] CALL ldv_get_dev(ldv_func_arg1) [L8318] DEV_STATE = DEV_STATE + 1 [L8319] return (data); VAL [={0:0}, ={0:0}, \result={2048:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, data={2048:0}, data={2048:0}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8021] RET ldv_get_dev(ldv_func_arg1) [L8022] return ((struct usb_device *)0); VAL [={0:0}, ={0:0}, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={2048:0}, ldv_func_arg1={2048:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6466] RET, EXPR ldv_usb_get_dev_43(tmp) [L6466] tmp___0 = ldv_usb_get_dev_43(tmp) [L6467] udev = tmp___0 [L6468] retval = -12 [L6469] EXPR udev->descriptor.iManufacturer VAL [={0:0}, ={0:0}, __constr_expr_0={-288225978105200593:0}, __constr_expr_1={-711573139171041227:0}, __constr_expr_2={8646915682597863447:0}, __key={-4619900183932047365:0}, __key___0={8646915682597863455:0}, __key___1={-576456354256912321:0}, __key___2={-288225978105200513:0}, __key___3={-288225978105200529:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={3461802728202174385:0}, id={3461802728202174385:0}, int_urb={0:0}, INTERF_STATE=0, interface={53326699823169:0}, interface={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-576456354256912353:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, product={-288225978105200577:0}, ref_cnt=0, retval=4294967284, serial_number={4603471852922728443:0}, SERIAL_STATE=0, tmp={2048:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6469-L6470] CALL usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=48, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-576456354256912353:0}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6469-L6470] RET usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-288225978105200593:0}, __constr_expr_1={-711573139171041227:0}, __constr_expr_2={8646915682597863447:0}, __key={-4619900183932047365:0}, __key___0={8646915682597863455:0}, __key___1={-576456354256912321:0}, __key___2={-288225978105200513:0}, __key___3={-288225978105200529:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={3461802728202174385:0}, id={3461802728202174385:0}, int_urb={0:0}, INTERF_STATE=0, interface={53326699823169:0}, interface={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-576456354256912353:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, product={-288225978105200577:0}, ref_cnt=0, retval=4294967284, serial_number={4603471852922728443:0}, SERIAL_STATE=0, tmp={2048:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iManufacturer=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iManufacturer, (char *)(& manufacturer), 48UL)=94, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6471] EXPR udev->descriptor.iProduct VAL [={0:0}, ={0:0}, __constr_expr_0={-288225978105200593:0}, __constr_expr_1={-711573139171041227:0}, __constr_expr_2={8646915682597863447:0}, __key={-4619900183932047365:0}, __key___0={8646915682597863455:0}, __key___1={-576456354256912321:0}, __key___2={-288225978105200513:0}, __key___3={-288225978105200529:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={3461802728202174385:0}, id={3461802728202174385:0}, int_urb={0:0}, INTERF_STATE=0, interface={53326699823169:0}, interface={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-576456354256912353:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, product={-288225978105200577:0}, ref_cnt=0, retval=4294967284, serial_number={4603471852922728443:0}, SERIAL_STATE=0, tmp={2048:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6471] CALL usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={-288225978105200577:0}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6471] RET usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-288225978105200593:0}, __constr_expr_1={-711573139171041227:0}, __constr_expr_2={8646915682597863447:0}, __key={-4619900183932047365:0}, __key___0={8646915682597863455:0}, __key___1={-576456354256912321:0}, __key___2={-288225978105200513:0}, __key___3={-288225978105200529:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={3461802728202174385:0}, id={3461802728202174385:0}, int_urb={0:0}, INTERF_STATE=0, interface={53326699823169:0}, interface={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-576456354256912353:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, product={-288225978105200577:0}, ref_cnt=0, retval=4294967284, serial_number={4603471852922728443:0}, SERIAL_STATE=0, tmp={2048:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iProduct=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iProduct, (char *)(& product), 32UL)=95, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6472] EXPR udev->descriptor.iSerialNumber VAL [={0:0}, ={0:0}, __constr_expr_0={-288225978105200593:0}, __constr_expr_1={-711573139171041227:0}, __constr_expr_2={8646915682597863447:0}, __key={-4619900183932047365:0}, __key___0={8646915682597863455:0}, __key___1={-576456354256912321:0}, __key___2={-288225978105200513:0}, __key___3={-288225978105200529:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={3461802728202174385:0}, id={3461802728202174385:0}, int_urb={0:0}, INTERF_STATE=0, interface={53326699823169:0}, interface={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-576456354256912353:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, product={-288225978105200577:0}, ref_cnt=0, retval=4294967284, serial_number={4603471852922728443:0}, SERIAL_STATE=0, tmp={2048:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6472-L6473] CALL usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, \old(arg1)=0, \old(arg3)=32, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0={0:0}, arg2={4603471852922728443:0}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8574] return __VERIFIER_nondet_int(); [L6472-L6473] RET usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL) VAL [={0:0}, ={0:0}, __constr_expr_0={-288225978105200593:0}, __constr_expr_1={-711573139171041227:0}, __constr_expr_2={8646915682597863447:0}, __key={-4619900183932047365:0}, __key___0={8646915682597863455:0}, __key___1={-576456354256912321:0}, __key___2={-288225978105200513:0}, __key___3={-288225978105200529:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={3461802728202174385:0}, id={3461802728202174385:0}, int_urb={0:0}, INTERF_STATE=0, interface={53326699823169:0}, interface={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, manufacturer={-576456354256912353:0}, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, product={-288225978105200577:0}, ref_cnt=0, retval=4294967284, serial_number={4603471852922728443:0}, SERIAL_STATE=0, tmp={2048:0}, tmp___0={0:0}, udev={0:0}, udev->descriptor.iSerialNumber=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, usb_string(udev, (int )udev->descriptor.iSerialNumber, (char *)(& serial_number), 32UL)=96, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6475] udev->descriptor.idVendor [L6475] udev->descriptor.idProduct [L6477] CALL, EXPR ldv_usb_alloc_urb_44(0, 208U) [L8027] ldv_func_ret_type___10 ldv_func_res ; [L8028] struct urb *tmp ; VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8030] CALL, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8532] CALL, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(size)=184, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L4238] void *p ; [L4239] void *tmp ; [L4240] int tmp___0 ; [L4242] tmp___0 = __VERIFIER_nondet_int() [L4243] COND TRUE tmp___0 != 0 [L4244] return ((void *)0); VAL [={0:0}, ={0:0}, \old(size)=184, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, size=184, tmp___0=2147483648, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8532] RET, EXPR ldv_malloc(sizeof(struct urb)) VAL [={0:0}, ={0:0}, \old(arg0)=null, \old(arg1)=208, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg0=null, arg1=208, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_malloc(sizeof(struct urb))={0:0}, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8532] return ldv_malloc(sizeof(struct urb)); [L8030] RET, EXPR usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_alloc_urb(ldv_func_arg1, ldv_func_arg2)={0:0}, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8030] tmp = usb_alloc_urb(ldv_func_arg1, ldv_func_arg2) [L8031] ldv_func_res = tmp VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8032] CALL ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8211] COND FALSE !((unsigned long )res != (unsigned long )((struct urb *)0)) VAL [={0:0}, ={0:0}, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, res={0:0}, res={0:0}, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8032] RET ldv_alloc_urb(ldv_func_res) VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8033] return (ldv_func_res); VAL [={0:0}, ={0:0}, \old(ldv_func_arg1)=null, \old(ldv_func_arg2)=null, \result={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1=null, ldv_func_arg2=null, ldv_func_res={0:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6477] RET, EXPR ldv_usb_alloc_urb_44(0, 208U) [L6477] command_out_urb = ldv_usb_alloc_urb_44(0, 208U) [L6478] COND TRUE (unsigned long )command_out_urb == (unsigned long )((struct urb *)0) [L6479] retval = -12 [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); [L6746] return (retval); VAL [={0:0}, ={0:0}, \result=-12, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, command_out_urb={0:0}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, id={3461802728202174385:0}, id={3461802728202174385:0}, int_urb={0:0}, INTERF_STATE=0, interface={53326699823169:0}, interface={53326699823169:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=0, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, retval=4294967284, SERIAL_STATE=0, tmp={2048:0}, tmp___0={0:0}, udev={0:0}, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7619] RET, EXPR vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7619] ldv_retval_2 = vub300_probe(vub300_driver_group1, (struct usb_device_id const *)ldvarg1) [L7620] COND FALSE !(ldv_retval_2 == 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=2, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7599] tmp___3 = __VERIFIER_nondet_int() [L7601] case 0: [L7607] case 1: [L7613] case 2: [L7676] case 3: [L7682] case 4: [L7728] case 5: [L7734] case 6: [L7740] case 7: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=7, tmp___4=0, tmp___6=1, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7741] COND TRUE ldv_state_variable_0 != 0 [L7742] tmp___6 = __VERIFIER_nondet_int() [L7744] case 0: VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=1, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7745] COND TRUE ldv_state_variable_0 == 3 && ref_cnt == 0 [L7746] CALL vub300_exit() [L6904] CALL ldv_usb_deregister_60(& vub300_driver) [L8119] FCALL usb_deregister(arg) [L8120] ldv_state_variable_7 = 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, arg={86:0}, arg={86:0}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6904] RET ldv_usb_deregister_60(& vub300_driver) [L6905] CALL ldv_flush_workqueue_61(cmndworkqueue) [L8127] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:4611686018427387904}, ldv_func_arg1={0:4611686018427387904}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8128] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8128] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:4611686018427387904}, ldv_func_arg1={0:4611686018427387904}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6905] RET ldv_flush_workqueue_61(cmndworkqueue) [L6906] CALL ldv_flush_workqueue_62(pollworkqueue) [L8135] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854773760:0}, ldv_func_arg1={-9223372036854773760:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8136] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8136] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854773760:0}, ldv_func_arg1={-9223372036854773760:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6906] RET ldv_flush_workqueue_62(pollworkqueue) [L6907] CALL ldv_flush_workqueue_63(deadworkqueue) [L8143] FCALL flush_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8144] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8144] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6907] RET ldv_flush_workqueue_63(deadworkqueue) [L6908] CALL ldv_destroy_workqueue_64(cmndworkqueue) [L8151] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:4611686018427387904}, ldv_func_arg1={0:4611686018427387904}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8152] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8152] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:4611686018427387904}, ldv_func_arg1={0:4611686018427387904}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6908] RET ldv_destroy_workqueue_64(cmndworkqueue) [L6909] CALL ldv_destroy_workqueue_65(pollworkqueue) [L8159] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854773760:0}, ldv_func_arg1={-9223372036854773760:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8160] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8160] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={-9223372036854773760:0}, ldv_func_arg1={-9223372036854773760:0}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6909] RET ldv_destroy_workqueue_65(pollworkqueue) [L6910] CALL ldv_destroy_workqueue_66(deadworkqueue) [L8167] FCALL destroy_workqueue(ldv_func_arg1) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8168] CALL call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7426] COND FALSE !(ldv_work_3_0 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7430] COND FALSE !(ldv_work_3_1 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7434] COND FALSE !(ldv_work_3_2 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7438] COND FALSE !(ldv_work_3_3 == state) VAL [={0:0}, ={0:0}, \old(DEV_STATE)=1, \old(ldv_timer_list_6)=null, \old(ldv_timer_list_6)=null, \old(ldv_timer_state_6)=0, \old(ldv_work_3_0)=0, \old(ldv_work_3_1)=0, \old(ldv_work_3_2)=0, \old(ldv_work_3_3)=0, \old(state)=2, \old(URB_STATE)=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, state=2, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8168] RET call_and_disable_all_3(2) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, ldv_func_arg1={0:-9223372036854775808}, ldv_func_arg1={0:-9223372036854775808}, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=3, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L6910] RET ldv_destroy_workqueue_66(deadworkqueue) [L7746] RET vub300_exit() [L7747] ldv_state_variable_0 = 2 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, ldvarg0={-1071838569372319728:0}, ldvarg1={3461802728202174385:0}, ldvarg2={3533847963858108446:0}, ldvarg3={3533860318213570472:0}, ldvarg4={3533847963858108447:0}, ldvarg5={-1071844066930458607:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, tmp={3461802728202174385:0}, tmp___0={3533847963858108447:0}, tmp___1={3533860318213570472:0}, tmp___2={3533847963858108446:0}, tmp___3=7, tmp___4=0, tmp___6=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L7788] CALL ldv_check_final_state() [L8380] COND FALSE !(URB_STATE != 0) VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8384] COND TRUE DEV_STATE != 0 VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8385] CALL ldv_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] [L8176] reach_error() VAL [={0:0}, ={0:0}, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __mod_usb_device_table=0, __this_module={94:93}, bulk_urb={0:0}, cmndworkqueue={0:4611686018427387904}, deadworkqueue={0:-9223372036854775808}, DEV_STATE=1, disable_offload_processing=0, firmware_irqpoll_timeout=1024, firmware_rom_wait_states=28, force_1_bit_data_xfers=0, force_max_req_size=128, force_polling_for_irqs=0, int_urb={0:0}, INTERF_STATE=0, LDV_IN_INTERRUPT=1, ldv_retval_0=0, ldv_retval_1=0, ldv_retval_2=4294967284, ldv_retval_3=0, ldv_state_variable_0=2, ldv_state_variable_1=1, ldv_state_variable_2=1, ldv_state_variable_3=1, ldv_state_variable_4=1, ldv_state_variable_5=1, ldv_state_variable_6=1, ldv_state_variable_7=0, ldv_state_variable_8=1, ldv_timer_list_4={0:0}, ldv_timer_list_5={0:0}, ldv_timer_list_6={0:0}, ldv_timer_state_4=0, ldv_timer_state_5=0, ldv_timer_state_6=0, ldv_work_1_0=0, ldv_work_1_1=0, ldv_work_1_2=0, ldv_work_1_3=0, ldv_work_2_0=0, ldv_work_2_1=0, ldv_work_2_2=0, ldv_work_2_3=0, ldv_work_3_0=0, ldv_work_3_1=0, ldv_work_3_2=0, ldv_work_3_3=0, ldv_work_struct_1_0={0:0}, ldv_work_struct_1_1={0:0}, ldv_work_struct_1_2={0:0}, ldv_work_struct_1_3={0:0}, ldv_work_struct_2_0={0:0}, ldv_work_struct_2_1={0:0}, ldv_work_struct_2_2={0:0}, ldv_work_struct_2_3={0:0}, ldv_work_struct_3_0={0:0}, ldv_work_struct_3_1={0:0}, ldv_work_struct_3_2={0:0}, ldv_work_struct_3_3={0:0}, limit_speed_to_24_MHz=0, pad_input_to_usb_pkt=0, pollworkqueue={-9223372036854773760:0}, ref_cnt=0, SERIAL_STATE=0, URB_STATE=0, usb_counter=0, usb_intfdata={0:0}, vub300_driver={86:0}, vub300_driver_group1={53326699823169:0}, vub300_mmc_ops={85:0}, vub300_mmc_ops_group0={3533860188827680680:0}, vub300_table={84:0}] - StatisticsResult: Ultimate Automizer benchmark data CFG has 95 procedures, 1587 locations, 1 error locations. Started 1 CEGAR loops. OverallTime: 157.5s, OverallIterations: 21, TraceHistogramMax: 8, PathProgramHistogramMax: 2, EmptinessCheckTime: 0.8s, AutomataDifference: 49.4s, DeadEndRemovalTime: 0.0s, HoareAnnotationTime: 0.0s, InitialAbstractionConstructionTime: 0.1s, PartialOrderReductionTime: 0.0s, HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 38202 SdHoareTripleChecker+Valid, 35.0s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 37951 mSDsluCounter, 191049 SdHoareTripleChecker+Invalid, 32.3s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 137376 mSDsCounter, 2633 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 3511 IncrementalHoareTripleChecker+Invalid, 6144 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 2633 mSolverCounterUnsat, 53673 mSDtfsCounter, 3511 mSolverCounterSat, 0.4s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown, PredicateUnifierStatistics: 0 DeclaredPredicates, 7687 GetRequests, 7573 SyntacticMatches, 0 SemanticMatches, 114 ConstructedPredicates, 0 IntricatePredicates, 0 DeprecatedPredicates, 111 ImplicationChecksByTransitivity, 9.9s Time, 0.0s BasicInterpolantAutomatonTime, BiggestAbstraction: size=31913occurred in iteration=15, InterpolantAutomatonStates: 110, traceCheckStatistics: No data available, InterpolantConsolidationStatistics: No data available, PathInvariantsStatistics: No data available, 0/0 InterpolantCoveringCapability, TotalInterpolationStatistics: No data available, 0.0s DumpTime, AutomataMinimizationStatistics: 12.9s AutomataMinimizationTime, 20 MinimizatonAttempts, 18740 StatesRemovedByMinimization, 12 NontrivialMinimizations, HoareAnnotationStatistics: No data available, RefinementEngineStatistics: TRACE_CHECK: 1.7s SsaConstructionTime, 22.0s SatisfiabilityAnalysisTime, 50.6s InterpolantComputationTime, 4161 NumberOfCodeBlocks, 3966 NumberOfCodeBlocksAsserted, 21 NumberOfCheckSat, 7652 ConstructedInterpolants, 0 QuantifiedInterpolants, 10252 SizeOfPredicates, 21 NumberOfNonLiveVariables, 23322 ConjunctsInSsa, 82 ConjunctsInUnsatCore, 40 InterpolantComputations, 31 PerfectInterpolantSequences, 7144/7230 InterpolantCoveringCapability, INVARIANT_SYNTHESIS: No data available, INTERPOLANT_CONSOLIDATION: No data available, ABSTRACT_INTERPRETATION: No data available, PDR: No data available, ACCELERATED_INTERPOLATION: No data available, SIFA: No data available, ReuseStatistics: No data available RESULT: Ultimate could not prove your program: unable to determine feasibility of some traces [2021-11-20 06:14:30,431 INFO L540 MonitoredProcess]: [MP /tmp/vcloud_worker_vcloud-master_on_vcloud-master/run_dir_201dae88-8cbb-4bc9-8af9-345e32d2dbad/bin/uautomizer-DQz5hQGWxF/z3 SMTLIB2_COMPLIANT=true -memory:2024 -smt2 -in -t:2000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: UNKNOWN: Overapproximated counterexample